CVE-2025-67174

Publication date

2025-12-17 00:00:00

Family

mitre

State

PUBLISHED

Description

A local file inclusion (LFI) vulnerability in RiteCMS v3.1.0 allows attackers to read arbitrary files on the host via a directory traversal in the admin_language_file and default_page_language_file in the admin.php component