CVE-2023-44767

Published October 25th, 2023

View on NVD ↗

CVSS v3

4.8

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content.

sromanhu/CVE-2023-44767_RiteCMS-File-Upload--XSS---Filemanager

RiteCMS 3.0 is affected by File Upload - XSS vulnerability that allows attackers to upload a PDF file with a hidden XSS that when executed will launch the XSS pop-up

GitHub