CVE-2025-67170

Medium · 6.1

CVSS

6.1

EPSS

0.3%

Published

Dec 17, 2025

CISA due date

—

The record

A reflected cross-site scripting (XSS) vulnerability in RiteCMS v3.1.0 allows attackers to execute arbitrary code in the context of a user's browser via a crafted payload.

Affected packages

Ecosystem	Package	Introduced	Fixed