https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T08:18:11.718827+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-352643 EUVD-2026-352643 2026-10-10T08:18:11.772770+00:00 EUVD-2026-352643 https://cve.radiocsirt.org/vuln/fkie_cve-2026-61524 fkie_cve-2026-61524 2026-10-10T08:18:11.772816+00:00

WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature that allows authenticated administrators to achieve remote code execution by uploading a crafted ZIP archive containing a PHP webshell alongside a valid info.php metadata file. Attackers can place the malicious archive through the module installation interface, causing the application to extract the webshell into a web-accessible modules/ subdirectory where it becomes immediately executable by any unauthenticated user via direct HTTP request.

 https://cve.radiocsirt.org/vuln/ghsa-m28x-gxhp-6x88 GHSA-m28x-gxhp-6x88 2026-10-10T08:18:11.772853+00:00

WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vulnerability in the module installation feature that allows authenticated administrators to achieve remote code execution by uploading a crafted ZIP archive containing a PHP webshell alongside a valid info.php metadata file. Attackers can place the malicious archive through the module installation interface, causing the application to extract the webshell into a web-accessible modules/ subdirectory where it becomes immediately executable by any unauthenticated user via direct HTTP request.