ritecms

🛡️ CVE-2024-28623 – XSS Vulnerability in RiteCMS v3.0.0 🔍 Overview This repository documents a Cross-Site Scripting XSS vulnerability discovered in RiteCMS v3.0.0 , which I reported and was assigned the CVE ID CVE-2024-28623. 📄 Vulnerability Details CVE ID : CVE-2024-28623 Product : RiteCMS Versio...

CVE-2024-28623

RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...

Cross site scripting

RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...

CVE-2024-28623

RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...

CVE-2024-28623

RiteCMS v3.0.0 was discovered to contain a cross-site scripting XSS vulnerability via the component mainmenu/editsection...

CVE-2024-28623

RiteCMS 3.0.0 contains a reflected XSS in the main_menu/edit_section component. The vulnerability stems from unsanitized user input, allowing an attacker to inject and execute arbitrary JavaScript in the victim’s browser. Impact includes potential credential/session token theft and browser sessio...