CVE-2021-36546

HIGH CVSS: 7.5 Published: 2023-02-03 Modified: 2026-06-17

Description

Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL.

Affected Platforms

Kitesky Kitecms

Weakness Type

CWE-922, CWE-922

References