Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-43879-RiteCMS-Stored-XSS---GlobalContent — About RiteCMS 3.0 is affected by a Multiple Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload to the Global Content Blocks in the Administration Menu | Kitploit
Tools/GitHubGitHub/sromanhu/cve-2023-43879-ritecms-stored-xss---globalcontent
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubsromanhu/cve-2023-43879-ritecms-stored-xss---globalcontent

CVE-2023-43879-RiteCMS-Stored-XSS---GlobalContent

About RiteCMS 3.0 is affected by a Multiple Cross-Site Scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload to the Global Content Blocks in the Administration Menu

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
2 years agoNot yet reviewed

Rite CMS v3.0 Multiple Stored XSS

Author: (Sergio)

Description: Rite CMS 3.0 is affected by a Cross-Site scripting (XSS) stored vulnerability that allows attackers to execute arbitrary code via a crafted payload in to the Global Content Blocks in the Administration Menu.

Attack Vectors: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L


POC:

When logging into the panel, we will go to the "Administration - Global Content Blocks - Home" .

We edit the body configuration where we add the XSS payloads.

XSS Payload

XSS Payload:

root@kitploit:~
'"><svg/onload=alert('document.domain')>

And when we save it, we will see that the XSS pop-up appears

XSS Payload  Result


Download Tool