Ritecms - vulnerabilities (CVEs)
17 CVEs in 1 products, 0 in the last 30 days, newest from 2025-12-17.
Products
- Ritecms - 17 CVEs
Newest CVEs of Ritecms
- CVE-2025-67170 - CVSS 6.1 (medium), 2025-12-17: A reflected cross-site scripting (XSS) vulnerability in RiteCMS v3.1.0 allows attackers to execute arbitrary code in the context of a user's browser via a…
- CVE-2025-67174 - CVSS 7.5 (high), 2025-12-17: A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the…
- CVE-2025-67173 - CVSS 6.8 (medium), 2025-12-17: A Cross-Site Request Forgery (CSRF) in the page creation/editing function of RiteCMS v3.1.0 allows attackers to arbitrarily create pages via a crafted POST…
- CVE-2025-67171 - CVSS 7.5 (high), 2025-12-17: Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal.
- CVE-2025-67168 - CVSS 5.3 (medium), 2025-12-17: RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.
- CVE-2025-67172 - CVSS 7.2 (high), 2025-12-17: RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.
- CVE-2024-28623 - CVSS 6.1 (medium), 2024-03-13: RiteCMS v3.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component main_menu/edit_section.
- CVE-2023-44767 - CVSS 4.8 (medium), 2023-10-25: A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content.
- CVE-2023-43877 - CVSS 4.8 (medium), 2023-10-04: Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page…
- CVE-2023-43878 - CVSS 5.4 (medium), 2023-09-28: Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to execute arbitrary code via a crafted payload into the Main Menu…
- CVE-2023-43879 - CVSS 4.8 (medium), 2023-09-28: Rite CMS 3.0 has a Cross-Site scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content…
- CVE-2022-24248 - CVSS 6.5 (medium), 2022-04-12: RiteCMS version 3.1.0 and below suffers from an arbitrary file deletion via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows…
- CVE-2022-24247 - CVSS 6.5 (medium), 2022-04-12: RiteCMS version 3.1.0 and below suffers from an arbitrary file overwrite via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows…
- CVE-2021-46367 - CVSS 7.2 (high), 2022-04-08: RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel. An authenticated attacker can upload a PHP file and…
- CVE-2020-23934 - CVSS 8.8 (high), 2020-08-18: An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php web shell in the "Filemanager" section.
- CVE-2013-5317 - CVSS 3.5 (low), 2013-08-20: Cross-site scripting (XSS) vulnerability in RiteCMS 1.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the mode parameter to…
- CVE-2013-5316 - CVSS 6.8 (medium), 2013-08-20: Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that…
