VendorsWBCEwbce_cms1.6.1
Vulnerabilities

WBCE CMS 1.6.1

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2023-38947
An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to execute arbitrary code via a crafted PHP file.
Published 2023-08-03 · Modified
7.2EPSS 0.005
CVE-2023-53901
WBCE CMS 1.6.1 Cross-Site Scripting and Open Redirect Vulnerability
Published 2025-12-16 · Analyzed
7.1EPSS 0.003
CVE-2023-43871
A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).
Published 2023-09-28 · Modified
5.4EPSS 0.004
CVE-2023-53909
WBCE CMS 1.6.1 SVG File Content Cross-Site Scripting
Published 2025-12-17 · Modified
5.4EPSS 0.003
CVE-2023-53910
WBCE CMS 1.6.1 Stored Cross-Site Scripting via Page Content
Published 2025-12-17 · Modified
5.4EPSS 0.003