CVE-2023-43879

Rite CMS 3.0 has a Cross-Site scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu.

Score

CVSS 3.1 4.8 Medium

Status

Modified - cve@mitre.org

Published

2023-09-28

Last modified

2024-09-23

Weaknesses

CWE-79

Affected products

• Ritecms (Ritecms)

References

• https://github.com/sromanhu/RiteCMS-Stored-XSS---GlobalContent/tree/main