PT-2025-49130 · Unknown · Webigniter

Published 2025-12-04 · Updated 2025-12-04 · CVE-2023-53735

Positive Technologies (AI Summary)

CVSS v4.0

5.3

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

Name of the Vulnerable Software and Affected Versions WEBIGniter version 28.7.23

Description WEBIGniter version 28.7.23 has a cross-site scripting issue in the user creation process. Unauthenticated attackers can use this to execute malicious JavaScript code, potentially leading to XSS attacks. The vulnerable process allows for the injection of scripts, which can then be executed in the context of a user's browser.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-53735

Affected Products

Webigniter

References · 6

• 🔥 https://exploit-db.com/exploits/51900 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53735 · Security Note
• https://webigniter.net · Note
• https://twitter.com/CVEnew/status/1996685100260446560 · Twitter Post
• https://webigniter.net/demo · Note
• https://vulncheck.com/advisories/webigniter-28723-cross-site-scripting-xss-in-user-creation-process · Note