CVE-2023-53869
HIGHWEBIGniter 28.7.23 - RCE
Title source: llmDescription
WEBIGniter 28.7.23 contains a file upload vulnerability that allows authenticated attackers to upload and execute dangerous PHP files through the media function. Attackers can leverage any created account to upload malicious PHP scripts that enable remote code execution on the application server.
Exploits (1)
Scores
CVSS v4
8.7
EPSS
0.0046
EPSS Percentile
63.9%
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Details
CWE
CWE-434
Status
published
Products (1)
WebIGniter/WebIGniter
28.7.23
Published
Dec 15, 2025
Tracked Since
Feb 18, 2026