Critical severity9.8OSV Advisory· Published Dec 15, 2025· Updated Jun 17, 2026

CVE-2023-53871

Description

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Soosyze/SoosyzeOSV3 versions
1.0.0, 1.0.0-alpha1, 1.0.0-alpha2, …+ 2 more
- (no CPE)range: 1.0.0, 1.0.0-alpha1, 1.0.0-alpha2, …
- cpe:2.3:a:soosyze:soosyze:2.0.0:*:*:*:*:*:*:*
- (no CPE)range: =2.0.0

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/51718nvdExploitThird Party AdvisoryVDB Entry
www.vulncheck.com/advisories/soosyze-unrestricted-file-upload-via-broken-upload-logicnvdThird Party Advisory
soosyze.comnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000