CVE-2021-31731

A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via ../ in the path parameter to index.php/admin/Template/fileedit, with PHP code in the html parameter...

CVE-2021-31731

KiteCMS 1.1.1 is affected by a directory traversal vulnerability reachable via ../ in the path parameter to index.php/admin/Template/fileedit, which can allow remote administrators to overwrite arbitrary files and place PHP code via the html parameter. This is corroborated by multiple sources in ...