CVE-2023-53869 HIGH

CVE-2023-53869: WEBIGniter 28.7.23 Unrestricted File Upload Remote Code Execution

Vendor Webigniter

Product WebIGniter

Weakness CWE-434 · Unrestricted file upload

Published December 15, 2025

Last update April 7, 2026

View on NVD All CVEs

CVSS base score

8.7/10

Attack vector Network

Attack complexity Low

Privileges required Low

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

WEBIGniter 28.7.23 contains a file upload vulnerability that allows authenticated attackers to upload and execute dangerous PHP files through the media function. Attackers can leverage any created account to upload malicious PHP scripts that enable remote code execution on the application server.

Key dates

02Disclosure timeline

December 15, 2025 CVE published

April 7, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-53869 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/434.html

Related vulnerabilities

04Related CVE

CVE-2025-7181 code-projects Staff Audit System test.php unrestricted upload CVE-2026-6271 Career Section <= 1.7 - Unauthenticated Arbitrary File Upload CVE-2025-7412 code-projects Library System profile.php unrestricted upload CVE-2025-5395 WordPress Automatic Plugin - AI content generator and auto poster plugin <= 3.115.0 - Authenticated (Author+) Arbitrary File Upload CVE-2025-20287 Cisco Evolved Programmable Network Manager Arbitrary File Upload Vulnerability