CVE-2023-53971: Webtareas Project Webtareas

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

WebTareas 2.4 contains a file upload vulnerability that allows authenticated users to upload malicious PHP files through the chat photo upload functionality. Attackers can upload a PHP file with arbitrary code to the /files/Messages/ directory and execute it directly through the generated file path.

Affected products

• Webtareas Project Webtareas: version 2.4 only

Published 2025-12-22. Last modified 2026-06-17.