ritecms Vulnerabilities and Affected Products
Vulnerabilities associated with ritecms.
Products
Clear product- ritecms2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-28623MEDIUM | RiteCMS 3.0.0 - Reflected Cross Site Scripting (XSS)RiteCMS v3.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component main_menu/edit_section. | CVSS6.1v3.1 | EPSS1.32% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2023-43879MEDIUM | Rite CMS 3.0 has a Cross-Site scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu. CWE-79Sep 28, 2023 | CVSS4.8v3.1 | EPSS0.486% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |