CVE-2025-67173

Medium · 6.8

CVSS

6.8

EPSS

0.2%

Published

Dec 17, 2025

CISA due date

—

The record

A Cross-Site Request Forgery (CSRF) in the page creation/editing function of RiteCMS v3.1.0 allows attackers to arbitrarily create pages via a crafted POST request.

Affected packages

Ecosystem	Package	Introduced	Fixed