Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2023-53735

WEBIGniter 28.7.23 Cross-Site Scripting (XSS) in User Creation Process

WEBIGniter 28.7.23 contains a cross-site scripting vulnerability in the user creation process that allows unauthenticated attackers to execute malicious JavaScript code, enabling potential XSS attacks.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Webigniter
Products
Webigniter
CVE-2023-53869

WEBIGniter 28.7.23 Unrestricted File Upload Remote Code Execution

WEBIGniter 28.7.23 contains a file upload vulnerability that allows authenticated attackers to upload and execute dangerous PHP files through the media function. Attackers can leverage any created account to upload malicious PHP scripts that enable remote code execution on the application server.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Webigniter
Products
Webigniter