Ritecms

17 CVEs across 1 Ritecms products. Browse Ritecms vulnerabilities, severities, and proof-of-concept exploits.

Ritecms products with known CVEs

ProductCVEs
Ritecms17
Ritecms CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-67174High7.52025-12-17A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the admin_langua…
CVE-2025-67173Medium6.82025-12-17A Cross-Site Request Forgery (CSRF) in the page creation/editing function of RiteCMS v3.1.0 allows attackers to arbitrarily create pages via a crafted POST req…
CVE-2025-67171High7.52025-12-17Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal.
CVE-2025-67170Medium6.12025-12-17A reflected cross-site scripting (XSS) vulnerability in RiteCMS v3.1.0 allows attackers to execute arbitrary code in the context of a user's browser via a craf…
CVE-2025-67168Medium5.32025-12-17RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.
CVE-2025-67172High7.22025-12-17RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.
CVE-2024-28623Medium6.12024-03-13RiteCMS v3.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component main_menu/edit_section.
CVE-2023-44767Medium4.82023-10-25A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content.
CVE-2023-43877Medium4.82023-10-04Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fiel…
CVE-2023-43879Medium4.82023-09-28Rite CMS 3.0 has a Cross-Site scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Block…
CVE-2023-43878Medium5.42023-09-28Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to execute arbitrary code via a crafted payload into the Main Menu It…
CVE-2022-24248Medium6.52022-04-12RiteCMS version 3.1.0 and below suffers from an arbitrary file deletion via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an…
CVE-2022-24247Medium6.52022-04-12RiteCMS version 3.1.0 and below suffers from an arbitrary file overwrite via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows a…
CVE-2021-46367High7.22022-04-08RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel. An authenticated attacker can upload a PHP file and bypa…
CVE-2020-23934High8.82020-08-18An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php web shell in the "Filemanager" section.
CVE-2013-53172013-08-20Cross-site scripting (XSS) vulnerability in RiteCMS 1.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the mode parameter to cm…
CVE-2013-53162013-08-20Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that chang…