CVE-2021-31731

2021-08-1222:15:07

Google

osv.dev

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.0%

JSON

A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via …/ in the path parameter to index.php/admin/Template/fileedit, with PHP code in the html parameter.

CPENameOperatorVersion
kitecmseqV1.1.1

CPE	Name	Operator	Version
	kitecms	eq	V1.1.1

References

github.com/Kitesky/KiteCMS/issues/9