📄 RiteCMS 3.1.0 Cross Site Scripting

RiteCMS version 3.1.0 suffers from a cross site scripting vulnerability. Exploit Title: RiteCMS 3.1.0 - Reflected XSS in Admin Panel Date: October 28, 2025 Exploit Author: Chokri Hammedi Vendor Homepage: https://ritecms.com/ Software Link: https://github.com/ritecms/ritecms Version: RiteCMS 3.1.0...

📄 RiteCMS 3.1.0 Remote Code Execution

RiteCMS version 3.1.0 suffers from an authenticated remote code execution vulnerability. Exploit Title: RiteCMS 3.1.0 - Authenticated Remote Code Execution RCE Date: 2025-10-26 Exploit Author: Chokri Hammedi Vendor Homepage: https://github.com/handylulu/RiteCMS Software Link:...

EUVD-2013-5157

Malware in sbrugna...

EUVD-2013-5156

Malware in sbrugna...

EUVD-2023-49094

Malicious code in bioql PyPI...

EUVD-2022-29155

Malicious code in bioql PyPI...

EUVD-2022-29154

Malicious code in bioql PyPI...

RiteCMS-2.0-RCE-PoC

RiteCMS 2.0 Remote Code Execution PoC This is a proof-of-conc...

RiteCMS 3.0.0 - Reflected Cross Site Scripting (XSS)

Exploit Title: RiteCMS 3.0.0 – Reflected Cross-Site Scripting XSS Google Dork: N/A Date: 2024-08-12 Exploit Author: GURJOT SINGH Vendor Homepage: https://ritecms.com/ Software Link: https://github.com/handylulu/RiteCMS/releases/download/V3.0.0/ritecms.v3.0.0.zip Version: Steps: 1. Log in or...

📄 RiteCMS 3.0.0 Cross Site Scripting

RiteCMS versions 3.0.0 and below suffer from a cross site scripting vulnerability. Exploit Title: RiteCMS 3.0.0 – Reflected Cross-Site Scripting XSS Google Dork: N/A Date: 2024-08-12 Exploit Author: GURJOT SINGH Vendor Homepage: https://ritecms.com/ Software Link:...

CVE-2024-28623

RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...

CVE-2023-44767

A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...

CVE-2022-24247

RiteCMS version 3.1.0 and below suffers from an arbitrary file overwrite via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated attacker to overwrite any file in the web root along with any other file on the server that the PHP process user has the...

CVE-2022-24248

RiteCMS version 3.1.0 and below suffers from an arbitrary file deletion via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated attacker to delete any file in the web root along with any other file on the server that the PHP process user has the prope...

CVE-2020-23934

An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php web shell in the "Filemanager" section...

RiteCMS Cross-Site Scripting Vulnerability (CNVD-2025-21552)

RiteCMS is an open source content management system based on PHP and SQLite. RiteCMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the component mainmenu/editsection, which can be exploited by an attacker to...

CVE-2024-28623

RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...

Cross site scripting

RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...

CVE-2024-28623

RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...

CVE-2024-28623

RiteCMS 3.0.0 contains a reflected XSS in the main_menu/edit_section component. The vulnerability stems from unsanitized user input, allowing an attacker to inject and execute arbitrary JavaScript in the victim’s browser. Impact includes potential credential/session token theft and browser sessio...