Skip to content
OpenAdvisories

Vendor

Websitebaker

7 known vulnerabilities.

Products

WebsiteBaker 7
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-53953

    WebsiteBaker 2.13.3 Stored Cross-Site Scripting via Page Creation

    WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts when creating web pages. Attackers can craft malicious payloads in page titles that execute arbitrary JavaScript when the page…

    Websitebaker WebsiteBaker
  • Medium 5.4
    CVE-2023-53903

    WebsiteBaker 2.13.3 Stored Cross-Site Scripting via SVG File Upload

    WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with embedded JavaScript. Attackers can upload crafted SVG files with script tags that execute when the file is viewed, enab…

    Websitebaker WebsiteBaker
  • Medium 6.5
    CVE-2023-53902

    WebsiteBaker 2.13.3 Directory Traversal via Media Delete Endpoint

    WebsiteBaker 2.13.3 contains a directory traversal vulnerability that allows authenticated attackers to delete arbitrary files by manipulating directory path parameters. Attackers can send crafted GET requests to /admin/media/delete.php with directory travers…

    Websitebaker WebsiteBaker