Vulnerability Details CVE-2025-67172
RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.8%
CVSS Severity
CVSS v3 Score 7.2
References
- https://github.com/handylulu/RiteCMS/
- https://github.com/handylulu/RiteCMS/blob/master/cms/includes/functions.inc.php#L297
- https://github.com/handylulu/RiteCMS/blob/master/cms/includes/functions.inc.php#L504
- https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67172
- https://github.com/mbiesiad/vulnerability-research/tree/main/CVE-2025-67172