CVE-2024-28623

MEDIUMNuclei

RiteCMS 3.0.0 - Reflected Cross Site Scripting (XSS)

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2024-28623 has a selected CVSS score of 6.1 (medium); EIP currently links 1 catalogued exploit and 1 Nuclei template.

Description

RiteCMS v3.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component main_menu/edit_section.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 13, 2024 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

ritecms

Browse ritecms / ritecms

Default status: unknown

CVE List3.0.0affected

Proofs of concept

1

Catalogued exploits

ExploitDBRiteCMS 3.0.0 - Reflected Cross Site Scripting (XSS)ExploitDB exploitby Gurjot SinghWriteup1 file
ExploitDB
PoC details
Analysisdeepseek-v4-pro:cloud ·

Technical assessment

The artifact is a textual writeup describing a reflected XSS vulnerability in RiteCMS 3.0.0. It provides a payload and manual reproduction steps but contains no executable exploit or scanner code.

Backdoor review

No backdoor observed in reviewed code

The supplied text file is a standard exploit disclosure describing a reflected XSS vulnerability in RiteCMS 3.0.0. It contains a benign HTML/JavaScript payload for demonstrating the vulnerability, along with descriptive metadata, impact statements, and mitigation advice. No concealed executable behavior, deceptive payload, or operator-directed harm is present in the reviewed text.

ClassificationWriteup
Model confidence95%
AuthenticationUnknown
LanguagesEnglish
Target softwareRiteCMS
Attack typesCross-Site Scripting (XSS)
Evidence & reasoningClassification basis · observed behavior · safety review
Technical evidence

Classification basis and observed behavior

Classification basis

The artifact is a textual description of a vulnerability with a payload and manual steps, but it contains no executable exploit code or automated scanner. It is a writeup.

exploits/multiple/webapps/52413.txt:1-39

Requirements

  • Victim must be logged in or navigate to the vulnerable main_menu/edit_section functionality.exploits/multiple/webapps/52413.txt:26
  • Attacker must inject the payload into the vulnerable parameter.exploits/multiple/webapps/52413.txt:27

Observed behavior

  • The writeup describes a reflected XSS vulnerability in the main_menu/edit_section component of RiteCMS 3.0.0.exploits/multiple/webapps/52413.txt:12-13
  • The provided payload payload withheld' is intended to trigger a JavaScript confirm dialog when injected.exploits/multiple/webapps/52413.txt:23
  • The artifact includes manual reproduction steps and references an external video PoC and repository.exploits/multiple/webapps/52413.txt:25-34
Safety-review evidence

Behaviors behind the backdoor verdict

Observables

Xss Payload
Payload withheldThis is the publicly disclosed proof-of-concept payload for the CVE-2024-28623 reflected XSS vulnerability. It triggers a JavaScript confirm dialog to demonstrate script execution, which is standard for vulnerability demonstration and does not indicate backdoor or malicious intent.exploits/multiple/webapps/52413.txt:23
External Reference
Payload withheldA link to a video proof-of-concept hosted on GitHub. The content of the video is not included in the evidence and was not reviewed.exploits/multiple/webapps/52413.txt:31
External Reference
Payload withheldA link to a GitHub repository containing a full write-up. The content of the repository is not included in the evidence and was not reviewed.exploits/multiple/webapps/52413.txt:34
Review boundaries

What the analysis did not establish

  • The artifact is a text file containing only a vulnerability description and manual reproduction steps; no executable code is present.
  • The referenced external video PoC and repository were not included in the evidence and were not analyzed.
  • The content of the externally linked video and GitHub repository was not reviewed. The analysis is limited to the text of the supplied file.
Model interpretation

This review is limited to the supplied PoC code and context. It does not assert that the code works or is safe to execute.

Nuclei templates

1
ProjectDiscoveryMEDIUMRiteCMS 3.0.0 - Cross-site ScriptingCVSS 6.1

RiteCMS v3.0.0 contains a reflected XSS caused by unsanitized input in the main_menu/edit_section component, letting attackers execute arbitrary scripts in the context of the victim's browser.

Impact

Attackers can execute arbitrary scripts in the victim's browser, potentially leading to session hijacking or defacement.

Remediation

Sanitize and validate input in the main_menu/edit_section component, and update to the latest version if available.

WeaknessesCWE-79
Authors0x_Akoko
Template tagscvecve2024ritecmsxssossauthenticated
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:ritecms:ritecms:3.0:*:*:*:*:*:*:*
FOFA: title="RiteCMS"
https://github.com/GURJOTEXPERT/ritecms https://nvd.nist.gov/vuln/detail/CVE-2024-28623

Source: ProjectDiscovery

References

2