What’s Vulnerable › Vulnerabilities

CVE-2023-53871: Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logic

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-12-15 · updated 2026-06-17
• Weakness: CWE-434

Description

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.

Affected products

• Soosyze: 2.0.0

References

• https://github.com/soosyze/soosyze
• https://soosyze.com/
• https://www.exploit-db.com/exploits/51718
• https://www.vulncheck.com/advisories/soosyze-unrestricted-file-upload-via-broken-upload-logic

Get alerted when CVE-2023-53871 or the next vulnerability affects your stack