Unrated severityNVD Advisory· Published Dec 15, 2025· Updated Apr 7, 2026
Perch CMS 3.2 Remote Code Execution via Unrestricted File Upload
CVE-2023-53889
Description
Perch CMS 3.2 contains a remote code execution vulnerability that allows authenticated administrators to upload arbitrary PHP files through the assets management interface. Attackers can upload a malicious .phar file with embedded system command execution capabilities to execute arbitrary commands on the server.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/51620mitreexploit
- www.vulncheck.com/advisories/perch-cms-remote-code-execution-via-unrestricted-file-uploadmitrethird-party-advisory
- grabaperch.commitreproduct
News mentions
0No linked articles in our index yet.