Vulnerability Database

322,905

Total vulnerabilities in the database

CVE-2021-47788

WebsiteBaker 2.13.0 contains an authenticated remote code execution vulnerability that allows users with language editing permissions to execute arbitrary code. Attackers can exploit the language installation endpoint by manipulating language installation parameters to achieve remote code execution on the server.

  • Published: Jan 16, 2026
  • Updated: Jan 31, 2026
  • CVE: CVE-2021-47788
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
websitebaker / websitebaker 2.13.0 2.13.0.x