Browse CVEs

HIGH 8.8 CVE-2021-47788 WebsiteBaker 2.13.0 contains an authenticated remote code execution vulnerability that allows users with language editing permissions to execute arbi… Websitebaker No fix yet Fix from $1,9502026-01-16 MEDIUM 5.4 CVE-2023-53953 WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts when creating we… Websitebaker No fix yet Fix from $1,6002025-12-19 MEDIUM 6.5 CVE-2023-53902 WebsiteBaker 2.13.3 contains a directory traversal vulnerability that allows authenticated attackers to delete arbitrary files by manipulating direct… Websitebaker No fix yet Fix from $1,6002025-12-16 MEDIUM 5.4 CVE-2023-53903 WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with embedded … Websitebaker No fix yet Fix from $1,6002025-12-16 CRITICAL 9.8 CVE-2020-25990 WebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow … Websitebaker No fix yet Fix from $2,3002020-10-01 MEDIUM 6.1 CVE-2017-16514 Multiple persistent stored Cross-Site-Scripting (XSS) vulnerabilities in the files /wb/admin/admintools/tool.php (Droplet Description) and /install/i… Websitebaker Mitigation only Fix from $1,6002018-01-10 CRITICAL 9.8 CVE-2017-9360 WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php. Websitebaker Mitigation only Fix from $2,3002017-06-02 MEDIUM 6.1 CVE-2017-9361 WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php. Websitebaker Mitigation only Fix from $1,6002017-06-02 HIGH 7.5 CVE-2014-9242 SQL injection vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 allows remote attackers to execute arbitrary SQL commands via the page_id… Websitebaker No fix yet Fix from $1,9502014-12-03