WebsiteBaker 2.13.0 - Remote Code Execution (RCE) (Authenticated)
Vulnerability Description
WebsiteBaker 2.13.0 contains an authenticated remote code execution vulnerability that allows users with language editing permissions to execute arbitrary code. Attackers can exploit the language installation endpoint by manipulating language installation parameters to achieve remote code execution on the server.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-47788
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Halit AKAYDIN (hLtAkydn)
References
Affected Vendor
Websitebaker
View all reports →