CVE-2023-39377: Siberiancms

High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days.

SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to upload a dangerous filetype via an unspecified method

Affected products

• Siberiancms Siberiancms: from 4.0.0, before 4.20.44 (fixed in 4.20.44); from 5.0.0, before 5.0.4 (fixed in 5.0.4)

Published 2023-09-27. Last modified 2026-06-17.