Kitesky: >> Kitecms >> 1.1.1 Security Vulnerabilities
Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the comment parameter.
CVSS Score
6.1
EPSS Score
0.002
Published
2023-04-04
KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module.
CVSS Score
6.5
EPSS Score
0.003
Published
2022-04-21
A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via ../ in the path parameter to index.php/admin/Template/fileedit, with PHP code in the html parameter.
CVSS Score
6.5
EPSS Score
0.006
Published
2021-08-12