Skip to content
OpenAdvisories

Product · MaxSite

CMS

9 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-3395 Public exploit

    MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injection

    A flaw has been found in MaxSite CMS up to 109.1. This impacts the function eval of the file application/maxsite/admin/plugins/editor_markitup/preview-ajax.php of the component MarkItUp Preview AJAX Endpoint. Executing a manipulation can lead to code injectio…