CVE-2025-67172
HighCVSS 7.2Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
RiteCMS v3.1.0 has an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.
Risk Assessment
Risk of server takeover by an authenticated user, potentially leading to full system compromise.
Recommendation
Upgrade to a patched version or restrict access to the function.
Other vulnerabilities in RiteCMS
See all- CVE-2025-67171High
Incorrect access control in the /templates/ component of RiteCMS v3.1.0 allows attackers to access sensitive files via directory traversal. The vulnerability enables reading files outside the intended directory.
- CVE-2025-67168Medium
RiteCMS v3.1.0 was discovered to use insecure encryption to store passwords.
Original NVD description (English source)
RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS