CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

NVD•added 2023/10/25 6:17 p.m.•11 views

CVE-2023-44767

A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...

4.8CVSS4.8AI score0.00179EPSS

Exploits1References1

OSV•added 2023/10/25 6:17 p.m.•3 views

CVE-2023-44767

A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...

4.8CVSS5.7AI score

Exploits0References1

Prion•added 2023/10/25 6:17 p.m.•18 views

Unrestricted file upload

A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content...

4.3CVSS4.7AI score0.00179EPSS

Exploits1References1Affected Software1

CVE•added 2023/10/24 12:0 a.m.•36 views

CVE-2023-44767

RiteCMS 3.0 is affected by a file-upload vulnerability that allows uploading SVGs containing XSS content due to insufficient validation. Root cause: lack of effective validation for uploaded files. Impact: local attacker can induce XSS; CNVD/CNNVD entries also describe potential for remote code e...

4.8CVSS4.7AI score0.00179EPSS

Exploits1References1Affected Software1