Skip to content
OpenAdvisories
Medium · 6.9 CVE-2023-53871 EUVD-2025-203433GHSA-xjx3-pxg9-f9p4

Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logic

Published Dec 15, 2025 · Updated Apr 7, 2026 · Assigned by VulnCheck

Description

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.

Affected products

VendorProductAffectedFixed
Soosyze Soosyze 2.0.0 —

References