VYPR
Unrated severityOSV Advisory· Published Dec 15, 2025· Updated Apr 7, 2026

Soosyze 2.0.0 Unrestricted File Upload via Broken Upload Logic

CVE-2023-53871

Description

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.