CVE-2023-53871: Soosyze

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Soosyze 2.0.0 contains a file upload vulnerability that allows attackers to upload arbitrary HTML files with embedded PHP code to the application. Attackers can exploit the broken file upload mechanism to potentially view sensitive file paths and execute malicious PHP scripts on the server.

Affected products

• Soosyze Soosyze: version 2.0.0 only

Published 2025-12-15. Last modified 2026-06-17.