KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module.