CVE-2025-67172

Summary

RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

Additional References

• https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67172

References

• https://github.com/handylulu/RiteCMS/
• https://github.com/handylulu/RiteCMS/blob/master/cms/includes/functions.inc.php#L297
• https://github.com/handylulu/RiteCMS/blob/master/cms/includes/functions.inc.php#L504
• https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67172

• ←Previous
• Next→