Skip to main content
ExploitPublished

RiteCMS 3.1.0 · Authenticated Remote Code Execution

Source Exploit-DB RSS Feed

0
Severity
Critical

Rated by Threat Radar

Data as of 22 Apr 2026, 07:07 UTC

What to do

AI-suggested

Until a fix is available, restrict page-editing privileges to trusted users only. Monitor for unauthorized changes to page content and consider disabling or restricting the use of [function:...] tags if possible.

Description

RiteCMS 3.1.0 - Authenticated Remote Code Execution

Indicators of compromise

Exploit source code

Exploit code for RiteCMS 3.1.0 - Authenticated Remote Code Execution997 characters
# Exploit Title: RiteCMS 3.1.0 - Authenticated Remote Code Execution 
# Date: 2025-10-26
# Exploit Author: Chokri Hammedi
# Vendor Homepage: https://github.com/handylulu/RiteCMS
# Software Link:
https://github.com/handylulu/RiteCMS/releases/download/V3.1.0/ritecms.v3.1.0.zip
# Version: 3.1.0
# Tested on: Windows XP


## Vulnerability Description
RiteCMS v3.1.0 contains an authenticated Remote Code Execution (RCE) via
its content_function() handler: [function:...] tags in page content are
evaluat…

References

Community reviews

Loading reviews…