CVE-2023-53868

High · 8.8

CVSS

8.8

EPSS

0.9%

Published

Dec 15, 2025

CISA due date

—

The record

Coppermine Gallery 1.6.25 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the plugin manager. Attackers can upload a zipped PHP file with system commands to the plugin directory and execute arbitrary code by accessing the uploaded plugin script.

Affected packages

Ecosystem	Package	Introduced	Fixed