CVE-2023-43879

Summary

Rite CMS 3.0 has a Cross-Site scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Blocks in the Administration Menu.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/sromanhu/RiteCMS-Stored-XSS—GlobalContent/tree/main

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/sromanhu/RiteCMS-Stored-XSS—GlobalContent/tree/main

• ←Previous
• Next→