Security Advisory

CVE-2023-53902

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-16 17:03:48

Last updated 2026-04-07 14:07:25

Assigner VulnCheck

State PUBLISHED

Description

WebsiteBaker 2.13.3 contains a directory traversal vulnerability that allows authenticated attackers to delete arbitrary files by manipulating directory path parameters. Attackers can send crafted GET requests to /admin/media/delete.php with directory traversal sequences to delete files outside the intended directory.

← Browse all CVEs View on cve.org ↗