Sitemagic vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Sitemagic products: 1 record(s), with severity, exploitation and fixes.

Sitemagic Cms 1

Exploited only (KEV) →

CVE-2023-53921 Critical · 9.8 CWE-434 Dec 17, 2025

SitemagicCMS 4.4.3 Remote Code Execution via Unrestricted File Upload

SitemagicCMS 4.4.3 contains a remote code execution vulnerability that allows attackers to upload malicious PHP files to the files/images directory. Attackers can upload a .phar file with system command execution payload to compromise the web application and execute arbitrary system commands.