CVE-2025-67174

Published December 17th, 2025

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

N/A

Affected

PROJECTS

Description

A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the admin_language_file and default_page_language_file in the admin.php component

mbiesiad/vulnerability-research

This repository contains information about the public CVEs I found.

GitHub

handylulu/RiteCMS

An ultrafast lightweight & easy CMS (Content Management System) based on Php & Sqlite.

GitHub