High severity8.8NVD Advisory· Published Dec 22, 2025· Updated Jun 17, 2026

CVE-2023-53971

Description

WebTareas 2.4 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the chat photo upload functionality. Attackers can upload a PHP file with arbitrary code to the /files/Messages/ directory and execute it directly through the generated file path.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

webTareas/webTareasllm-fuzzy
Range: <2.4
luiswang/WebTareasv5
Range: 2.4
Webtareas Project/Webtareas
cpe:2.3:a:webtareas_project:webtareas:2.4:-:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/51089nvdExploit
www.vulncheck.com/advisories/webtareas-authenticated-remote-code-execution-via-file-uploadnvdThird Party Advisory
sourceforge.net/projects/webtareas/nvdProduct

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000