Browse CVEs

HIGH 8.8 CVE-2021-47788 WebsiteBaker 2.13.0 contains an authenticated remote code execution vulnerability that allows users with language editing permissions to execute arbi… Websitebaker No fix yet Fix from $1,9502026-01-16 MEDIUM 5.4 CVE-2023-53953 WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts when creating we… Websitebaker No fix yet Fix from $1,6002025-12-19 MEDIUM 6.5 CVE-2023-53902 WebsiteBaker 2.13.3 contains a directory traversal vulnerability that allows authenticated attackers to delete arbitrary files by manipulating direct… Websitebaker No fix yet Fix from $1,6002025-12-16 MEDIUM 5.4 CVE-2023-53903 WebsiteBaker 2.13.3 contains a stored cross-site scripting vulnerability that allows authenticated users to upload malicious SVG files with embedded … Websitebaker No fix yet Fix from $1,6002025-12-16 CRITICAL 9.8 CVE-2020-25990 WebsiteBaker 2.12.2 allows SQL Injection via parameter 'display_name' in /websitebaker/admin/preferences/save.php. Exploiting this issue could allow … Websitebaker No fix yet Fix from $2,3002020-10-01 HIGH 7.5 CVE-2011-4322 websitebaker prior to and including 2.8.1 has an authentication error in backup module. Websitebaker after 2.8.1 Fix from $1,9502020-01-21 HIGH 8.8 CVE-2011-2934 A Cross Site Request Forgery (CSRF) vulnerability exists in the administrator functions in WebsiteBaker 2.8.1 and earlier due to inadequate confirmat… Websitebaker after 2.8.1 Fix from $1,9502020-01-14 HIGH 7.2 CVE-2011-2933 An Arbitrary File Upload vulnerability exists in admin/media/upload.php in WebsiteBaker 2.8.1 and earlier due to a failure to restrict uploaded files… Websitebaker after 2.8.1 Fix from $1,9502020-01-14 MEDIUM 6.1 CVE-2017-16514 Multiple persistent stored Cross-Site-Scripting (XSS) vulnerabilities in the files /wb/admin/admintools/tool.php (Droplet Description) and /install/i… Websitebaker Mitigation only Fix from $1,6002018-01-10 CRITICAL 9.8 CVE-2017-9771 install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the database_username, database_host, or database_… Websitebaker Patch available Fix from $2,3002017-06-21 CRITICAL 9.8 CVE-2017-9360 WebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php. Websitebaker Mitigation only Fix from $2,3002017-06-02 MEDIUM 6.1 CVE-2017-9361 WebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php. Websitebaker Mitigation only Fix from $1,6002017-06-02 CRITICAL 9.8 CVE-2017-7410 Multiple SQL injection vulnerabilities in account/signup.php and account/signup2.php in WebsiteBaker 2.10.0 and earlier allow remote attackers to exe… Websitebaker after 2.10.0 Fix from $2,3002017-04-03 HIGH 7.5 CVE-2014-9242 SQL injection vulnerability in admin/pages/modify.php in WebsiteBaker 2.8.3 allows remote attackers to execute arbitrary SQL commands via the page_id… Websitebaker No fix yet Fix from $1,9502014-12-03