Skip to content
OpenAdvisories

Product · WebsiteBaker Org e.V.

WebsiteBaker CMS

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-61524

    WebsiteBaker CMS < 2.13.10 File Upload RCE via Module Installation

    WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature that allows authenticated administrators to achieve remote code execution by uploading a crafted ZIP archive containing a PHP webshell alongs…

    WebsiteBaker Org e.V. WebsiteBaker CMS
  • High 7.2
    CVE-2026-61523

    WebsiteBaker CMS < 2.13.10 Code Injection via Droplets Editor

    WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability in the Droplets editor that allows authenticated administrators to inject arbitrary PHP code by submitting malicious content through the droplet Code field, which is written verbatim to a…

    WebsiteBaker Org e.V. WebsiteBaker CMS