Maxsite Maxsite vulnerabilities

• maxsite cms MaxSite CMS through 109.6 PHP Object Injection via ci_session CVE-2026-87930 Public exploit 9.2 CriticalSeptember 9, 2026
• maxsite cms MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key CVE-2026-87929 9.3 CriticalSeptember 9, 2026
• maxsite cms MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_page CVE-2026-87928 5.1 MediumSeptember 9, 2026
• maxsite cms MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcher CVE-2026-87927 8.8 HighSeptember 9, 2026
• maxsite cms MaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser Cookie CVE-2026-70554 9.3 CriticalAugust 4, 2026
• maxsite cms MaxSite CMS Unauthenticated RCE via Install Endpoint CVE-2026-70553 9.3 CriticalAugust 4, 2026
• maxsite cms MaxSite CMS 109.5 Unauthenticated AJAX Dispatcher Bypass via ajax.php CVE-2026-70552 9.3 CriticalAugust 4, 2026
• maxsite cms Cross Site Scripting vulnerability in Maxsite CMS v.108.7 allows a remote attacker to execute... CVE-2023-36291 6.1 MediumJuly 3, 2023
• maxsite cms A reflected cross-site scripting (XSS) vulnerability in MaxSite CMS before V106 via product/page/... CVE-2021-35265 6.1 MediumAugust 3, 2021
• maxsite SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to... CVE-2008-2487 Public exploit 7.5 HighMay 28, 2008