CVE-2022-24247

6.5 mediumEPSS 4.2%

Medium (6.5) in ritecms ritecms. EPSS 4.2% chance of exploitation in the next 30 days.

RiteCMS version 3.1.0 and below suffers from an arbitrary file overwrite via path traversal vulnerability in Admin Panel. Exploiting the vulnerability allows an authenticated attacker to overwrite any file in the web root (along with any other file on the server that the PHP process user has the proper permissions to write) resulting a remote code execution.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

EPSS: 4.2% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2022-04-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ritecms:ritecms

References

https://cxsecurity.com/issue/WLB-2022010019
https://www.exploit-db.com/exploits/50614
https://cxsecurity.com/issue/WLB-2022010019
https://www.exploit-db.com/exploits/50614

Check your stack JSON