CVE-2025-67172

Description

RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://github.com/handylulu/RiteCMS/ ↗
• https://github.com/handylulu/RiteCMS/blob/master/cms/includes/functions.inc.php#L297 ↗
• https://github.com/handylulu/RiteCMS/blob/master/cms/includes/functions.inc.php#L504 ↗
• https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67172 ↗