Read the docs

WEBIGniter

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

WEBIGniter records in CISA KEV

No WEBIGniter vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2023-30022 CVE-2023-53735 · GHSA-qgcj-8387-g53g

WEBIGniter 28.7.23 Cross-Site Scripting (XSS) in User Creation Process

Priority MEDIUM 63

WEBIGniter 28.7.23 contains a cross-site scripting vulnerability in the user creation process that allows unauthenticated attackers to execute malicious JavaScript code, enabling potential XSS attacks.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00442 Published 2025-12-04 No fix listed CWE-79
TI-2023-30152 CVE-2023-53869 · GHSA-r46w-6r25-mwj8

WEBIGniter 28.7.23 Unrestricted File Upload Remote Code Execution

Priority MEDIUM 40

WEBIGniter 28.7.23 contains a file upload vulnerability that allows authenticated attackers to upload and execute dangerous PHP files through the media function.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00514 Published 2025-12-15 No fix listed CWE-434
Open these records in search →