Skip to content
OpenAdvisories

Product · MaxSite

CMS

9 known vulnerabilities.

6 results · Clear filters · Feed

  • Low 2.4

    MaxSite CMS ushki Plugin cross site scripting

    A vulnerability was found in MaxSite CMS up to 109.3. Impacted is an unknown function of the component ushki Plugin. Performing a manipulation of the argument f_ushka_new/f_ushk results in cross site scripting. Remote exploitation of the attack is possible. T…

  • Low 2.4

    MaxSite CMS Guestbook Plugin cross site scripting

    A vulnerability has been found in MaxSite CMS up to 109.3. This issue affects some unknown processing of the component Guestbook Plugin. Such manipulation of the argument f_text/f_slug/f_limit/f_email leads to cross site scripting. The attack may be launched …

  • Low 2.4

    MaxSite CMS down_count Plugin cross site scripting

    A flaw has been found in MaxSite CMS up to 109.3. This vulnerability affects unknown code of the component down_count Plugin. This manipulation of the argument f_file/f_prefix causes cross site scripting. The attack may be initiated remotely. The exploit has …

  • Low 2.4

    MaxSite CMS mail_send Plugin cross site scripting

    A security vulnerability has been detected in MaxSite CMS up to 109.3. Affected by this issue is some unknown functionality of the component mail_send Plugin. The manipulation of the argument f_subject/f_files/f_from leads to cross site scripting. The attack …

  • Low 2.4

    MaxSite CMS Redirect Plugin cross site scripting

    A vulnerability was detected in MaxSite CMS up to 109.3. This affects an unknown part of the component Redirect Plugin. The manipulation of the argument f_all/f_all404 results in cross site scripting. The attack can be launched remotely. The exploit is now pu…

  • Low 2.4

    MaxSite CMS Antispam Plugin plugin_antispam cross site scripting

    A weakness has been identified in MaxSite CMS up to 109.3. Affected by this vulnerability is an unknown functionality of the file /admin/plugin_antispam of the component Antispam Plugin. Executing a manipulation of the argument f_logging_file can lead to cros…