CVE-2023-53921

CRITICAL 9.8CVE-2023-53921 · Published 17/12/2025 · updated 17/06/2026

In short

CVE-2023-53921 is a CRITICAL (CVSS 9.8) vulnerability affecting sitemagic cms (sitemagic).
Chance of exploitation in the next 30 days (EPSS): 0.96%, higher than 61.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sitemagic cms sitemagic	`= 4.4.3`	No fix yet

Description

SitemagicCMS 4.4.3 contains a remote code execution vulnerability that allows attackers to upload malicious PHP files to the files/images directory. Attackers can upload a .phar file with system command execution payload to compromise the web application and execute arbitrary system commands.

References

sitemagic.org/Download.html · Product
exploit-db.com/exploits/51464 · Exploit
vulncheck.com/advisories/sitemagiccms-remote-code-execution-via-unrestricted-file-upload · Third Party Advisory

More vulnerabilities in sitemagic cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free