CVE-2023-53921: Sitemagic CMS

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

SitemagicCMS 4.4.3 contains a remote code execution vulnerability that allows attackers to upload malicious PHP files to the files/images directory. Attackers can upload a .phar file with system command execution payload to compromise the web application and execute arbitrary system commands.

Affected products

• Sitemagic Sitemagic CMS: version 4.4.3 only

Published 2025-12-17. Last modified 2026-06-17.