1.6.1

DATE	CVE	VULNERABILITY TITLE	RISK
2023-09-28	CVE-2023-43871	Cross-site Scripting vulnerability in Wbce CMS 1.6.1 A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS). network low complexity wbce CWE-79	5.4
2023-08-03	CVE-2023-38947	Unrestricted Upload of File with Dangerous Type vulnerability in Wbce CMS 1.6.1 An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to execute arbitrary code via a crafted PHP file. network low complexity wbce CWE-434	7.2