CVE-2023-26877: Softexpert Excellence Suite

Medium severity, CVSS 6.3. EPSS: 0.4% chance of exploitation in the next 30 days.

File upload vulnerability found in Softexpert Excellence Suite v.2.1 allows attackers to execute arbitrary code via a .php file upload to the form/efms_exec_html/file_upload_parser.php endpoint.

Affected products

• Softexpert Excellence Suite

Published 2024-06-26. Last modified 2026-06-17.