Maxsite vulnerabilities

Products

• Cms 9
• Cms 7
• Cms 2

Newest

• maxsite cms MaxSite CMS through 109.6 PHP Object Injection via ci_session CVE-2026-87930 Public exploit 9.2 CriticalSeptember 9, 2026
• maxsite cms MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key CVE-2026-87929 9.3 CriticalSeptember 9, 2026
• maxsite cms MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_page CVE-2026-87928 5.1 MediumSeptember 9, 2026
• maxsite cms MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcher CVE-2026-87927 8.8 HighSeptember 9, 2026
• maxsite cms MaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser Cookie CVE-2026-70554 9.3 CriticalAugust 4, 2026
• maxsite cms MaxSite CMS Unauthenticated RCE via Install Endpoint CVE-2026-70553 9.3 CriticalAugust 4, 2026
• maxsite cms MaxSite CMS 109.5 Unauthenticated AJAX Dispatcher Bypass via ajax.php CVE-2026-70552 9.3 CriticalAugust 4, 2026
• maxsite cms MaxSite CMS ushki Plugin cross site scripting CVE-2026-7016 4.8 MediumApril 26, 2026
• maxsite cms MaxSite CMS Guestbook Plugin cross site scripting CVE-2026-7015 4.8 MediumApril 26, 2026
• maxsite cms MaxSite CMS down_count Plugin cross site scripting CVE-2026-7014 4.8 MediumApril 26, 2026
• maxsite cms MaxSite CMS mail_send Plugin cross site scripting CVE-2026-7013 4.8 MediumApril 26, 2026
• maxsite cms MaxSite CMS Redirect Plugin cross site scripting CVE-2026-7012 4.8 MediumApril 26, 2026
• maxsite cms MaxSite CMS Antispam Plugin plugin_antispam cross site scripting CVE-2026-7011 4.8 MediumApril 26, 2026
• max-3000 maxsite cms, maxsite cms +1 more MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injection CVE-2026-3395 Public exploit 6.9 MediumMarch 1, 2026
• max-3000 maxsite cms, maxsite cms +1 more MaxSite CMS save-file-ajax.php unrestricted upload CVE-2025-12347 5.3 MediumOctober 28, 2025
• max-3000 maxsite cms, maxsite cms +1 more MaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted upload CVE-2025-12346 5.3 MediumOctober 28, 2025
• maxsite cms Cross Site Scripting vulnerability in Maxsite CMS v.108.7 allows a remote attacker to execute... CVE-2023-36291 6.1 MediumJuly 3, 2023
• maxsite cms A reflected cross-site scripting (XSS) vulnerability in MaxSite CMS before V106 via product/page/... CVE-2021-35265 6.1 MediumAugust 3, 2021
• maxsite SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to... CVE-2008-2487 Public exploit 7.5 HighMay 28, 2008