medium6.1Public exploit code
CVE-2024-28623
RiteCMS v3.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component main_menu/edit_section.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RiteCMS 3.0.0 - Reflected Cross Site Scripting (XSS)2025-08-18 · webapps · multiple
Impact
RiteCMS v3.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component main_menu/edit_section.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ritecms | Ritecms | Version 3.0 |