CVE-2024-28623

RiteCMS 3.0.0 contains a reflected XSS in the main_menu/edit_section component. The vulnerability stems from unsanitized user input, allowing an attacker to inject and execute arbitrary JavaScript in the victim’s browser. Impact includes potential credential/session token theft and browser sessio...

CVE-2024-28623

RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...

PT-2024-22496 · Ritecms · Ritecms

Name of the Vulnerable Software and Affected Versions: RiteCMS version 3.0.0 Description: A cross-site scripting XSS issue was found in the main menu/edit section component. This allows for potential XSS attacks. Recommendations: For RiteCMS version 3.0.0, consider disabling access to the main...

RiteCMS Cross-Site Scripting Vulnerability (CNVD-2023-86334)

RiteCMS is a website CMS. A cross-site scripting vulnerability exists in RiteCMS v3.0, which stems from the application's lack of effective validation of uploaded files. The vulnerability can be exploited to remotely execute arbitrary code by uploading malicious files...

CVE-2023-44767

A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...

CVE-2023-44767

A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...

Unrestricted file upload

A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...

RiteCMS 跨站脚本漏洞

RiteCMS is a website CMS. A cross-site scripting vulnerability exists in RiteCMS v3.0, which stems from the application's lack of effective validation of uploaded files. The vulnerability can be exploited to remotely execute arbitrary code by uploading malicious files...

CVE-2023-44767

A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...

PT-2023-29291 · Ritecms · Ritecms

Name of the Vulnerable Software and Affected Versions: RiteCMS version 3.0 Description: A File upload issue allows a local attacker to upload a SVG file containing XSS content. Recommendations: For RiteCMS version 3.0, consider restricting file uploads to prevent exploitation until a fix is...

CVE-2023-44767

A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...

CVE-2023-44767

A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...

CVE-2023-44767

RiteCMS 3.0 is affected by a file-upload vulnerability that allows uploading SVGs containing XSS content due to insufficient validation. Root cause: lack of effective validation for uploaded files. Impact: local attacker can induce XSS; CNVD/CNNVD entries also describe potential for remote code e...

RiteCMS Cross-Site Scripting Vulnerability (CNVD-2026-05345)

RiteCMS is an open source content management system based on php and sqlite. RiteCMS suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary code in the Main Menu Items of the Administration Menu via a specially crafted payload...

RiteCMS Cross-Site Scripting Vulnerability (CNVD-2026-05346)

RiteCMS is an open source content management system based on php and sqlite. RiteCMS suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary code via a specially crafted payload in Global Content Blocks in the Administration Menu...

RiteCMS Cross-Site Scripting Vulnerability (CNVD-2026-05347)

RiteCMS is an open source content management system based on php and sqlite. RiteCMS has a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the Home Page field, which can be exploited by an attacker to execute arbitrary Web...

RiteCMS Cross-Site Scripting Vulnerability

RiteCMS is a website CMS. A security vulnerability exists in Rite CMS version 3.0 that stems from a cross-site scripting XSS vulnerability in the Home Page field...

RiteCMS Cross-Site Scripting Vulnerability

RiteCMS is a website CMS. A cross-site scripting vulnerability exists in RiteCMS version 3.0. An attacker can exploit this vulnerability to execute arbitrary code in Global Content Blocks in the Administration Menu via a specially crafted payload...

RiteCMS Cross-Site Scripting Vulnerability

RiteCMS is a website CMS. A cross-site scripting vulnerability exists in RiteCMS version 3.0. An attacker can exploit this vulnerability to execute arbitrary code in the Main Menu Items of the Administration Menu via a specially crafted payload...

RiteCMS Directory Traversal (CVE-2022-24248)

A directory traversal vulnerability exists in RiteCMS. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...