CVE-2023-53871

Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logic

CVSS 6.9 MEDIUMEPSS 0.5%CWE-434

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 6.9EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

15 Dec 2025Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Affected products

Soosyze · Soosyze

References

https://github.com/soosyze/soosyze https://soosyze.com/https://www.exploit-db.com/exploits/51718 https://www.vulncheck.com/advisories/soosyze-unrestricted-file-upload-via-broken-upload-logic