Ritecms

Every one of the 17 is a mark on the map. Named now: 1 to 17, most at risk first.

1. RiteCMS 3.0.0 - Cross-site ScriptingCVE-2024-28623Ritecms · CVSS 6.1 · 1.3% likely

   CWE-79

2. RiteCMS version 3.1.0 and below suffers from a remote code execution vulnerability in the admin panel. An authenticated attacker can upload a PHP file and bypass the .htacess conf…CVE-2021-46367Ritecms · 30% likely

   CWE-434

3. RiteCMS version 3.1.0 and below suffers from an arbitrary file deletion via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated attac…CVE-2022-24248Ritecms · 21% likely

   CWE-22

4. An issue was discovered in RiteCMS 2.2.1. An authenticated user can directly execute system commands by uploading a php web shell in the "Filemanager" section.CVE-2020-23934Ritecms · 16% likely

   CWE-78

5. RiteCMS version 3.1.0 and below suffers from an arbitrary file overwrite via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated atta…CVE-2022-24247Ritecms · 4.2% likely

   CWE-22

6. Cross-site scripting (XSS) vulnerability in RiteCMS 1.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the mode parameter to cms/index.php.CVE-2013-5317Ritecms · 2.6% likely

   CWE-79

7. Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator…CVE-2013-5316Ritecms · 2.3% likely

   CWE-352

8. A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the admin_language_file and default_…CVE-2025-67174Ritecms · CVSS 6.2 · 1.3% likely

   CWE-22

9. RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.CVE-2025-67172Ritecms · CVSS 7.2 · 0.9% likely

   CWE-78

10. Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal.CVE-2025-67171Ritecms · CVSS 7.5 · 0.8% likely

    CWE-22

11. A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content.CVE-2023-44767Ritecms · 0.6% likely

    CWE-79

12. Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administra…CVE-2023-43877Ritecms · 0.5% likely

    CWE-79

13. Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to execute arbitrary code via a crafted payload into the Main Menu Items in the Administr…CVE-2023-43878Ritecms · 0.5% likely

    CWE-79

14. Rite CMS 3.0 has a Cross-Site scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administrat…CVE-2023-43879Ritecms · CVSS 4.8 · 0.5% likely

    CWE-79

15. A reflected cross-site scripting (XSS) vulnerability in RiteCMS v3.1.0 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload.CVE-2025-67170Ritecms · CVSS 6.1 · 0.3% likely

    CWE-79

16. A Cross-Site Request Forgery (CSRF) in the page creation/editing function of RiteCMS v3.1.0 allows attackers to arbitrarily create pages via a crafted POST request.CVE-2025-67173Ritecms · CVSS 6.8 · 0.2% likely

    CWE-352

17. RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.CVE-2025-67168Ritecms · CVSS 5.3 · 0.1% likely

    CWE-916

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.