Vulnerability · Published Dec 15, 2025 · Assigned by VulnCheck
CVE-2023-53869WEBIGniter 28.7.23 Unrestricted File Upload Remote Code Execution
High 8.7
In plain English
A high-severity unrestricted file upload in WebIGniter from WebIGniter. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Severity (CVSS 4.0)8.7High
Exploit odds (30 days)0.5%top 56.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
WEBIGniter 28.7.23 contains a file upload vulnerability that allows authenticated attackers to upload and execute dangerous PHP files through the media function. Attackers can leverage any created account to upload malicious PHP scripts that enable remote code execution on the application server.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| WebIGniter | WebIGniter | 28.7.23 |
Weakness: CWE-434 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
- ExploitDB-51736 exploit
- Webigniter Product Webpage product
- VulnCheck Advisory: WEBIGniter 28.7.23 Unrestricted File Upload Remote Code Execution third-party-advisory