Vulnerabilities in websitebaker
7 resultsVexday analysis
WebsiteBaker apresenta um perfil de risco baixo com apenas 3 vulnerabilidades conhecidas, nenhuma sendo explorada ativamente ou classificada como crítica. A fraqueza dominante (CWE-22, path traversal) é típica de produtos legados e não representa ameaça imediata, sendo que nenhuma vulnerabilidade foi divulgada nos últimos 90 dias.
CVE-2011-4322—websitebaker prior to and including 2.8.1 has an authentication error in backup module.EPSS 1.2%CVE-2011-2933—An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failure to restrict uploaEPSS 1.1%CVE-2023-53902HIGHWebsiteBaker 2.13.3 Directory Traversal via Media Delete EndpointEPSS 1.0%CVE-2021-47788HIGHWebsiteBaker 2.13.0 - Remote Code Execution (RCE) (Authenticated)EPSS 1.0%CVE-2011-2934—A Cross Site Request Forgery (CSRF) vulnerability exists in the administrator functions in WebsiteBaker 2.8.1 and earlier due to inadequate EPSS 0.5%CVE-2023-53953MEDIUMWebsiteBaker 2.13.3 Stored Cross-Site Scripting via Page CreationEPSS 0.2%CVE-2023-53903MEDIUMWebsiteBaker 2.13.3 Stored Cross-Site Scripting via SVG File UploadEPSS 0.2%