CVE-2023-53902 - WebsiteBaker 2.13.3 Directory Traversal via Media Delete Endpoint

CVE ID : CVE-2023-53902 Published : Dec. 16, 2025, 5:16 p.m. | 52 minutes ago Description : WebsiteBaker 2.13.3 contains a directory traversal vulnerability that allows authenticated attackers to delete arbitrary files by manipulating directory path parameters. Attackers can send crafted GET requests to /admin/media/delete.php with directory traversal sequences to delete files outside the intended directory. Severity: 7.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor