CVE-2023-53975 CRITICAL

CVE-2023-53975: Atom CMS 2.0 Unauthenticated SQL Injection via Admin Index Page

Vendor Thedigicraft
Product Atom CMS
Weakness CWE-89 · SQLi
Published December 22, 2025
Last update April 7, 2026
View on NVD All CVEs

CVSS base score

9.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Atom CMS 2.0 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries through unvalidated parameters. Attackers can inject malicious SQL code in the 'id' parameter of the admin index page to execute time-based blind SQL injection attacks.

Key dates

02Disclosure timeline

December 22, 2025 CVE published
April 7, 2026 Record updated