CVE-2021-31731

2021-08-1221:27:02

mitre

www.cve.org

kitecms

directory traversal

remote administrators

file overwrite

security issue

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

29.8%

JSON

A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via …/ in the path parameter to index.php/admin/Template/fileedit, with PHP code in the html parameter.

References

github.com/Kitesky/KiteCMS/issues/9