Skip to content
OpenAdvisories

Product · MaxSite

CMS

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-12347

    MaxSite CMS save-file-ajax.php unrestricted upload

    A flaw has been found in MaxSite CMS up to 109. This issue affects some unknown processing of the file application/maxsite/admin/plugins/editor_files/save-file-ajax.php. Executing manipulation of the argument file_path/content can lead to unrestricted upload.…

    MaxSite CMS
  • Medium 6.3
    CVE-2025-12346

    MaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted upload

    A vulnerability was detected in MaxSite CMS up to 109. This vulnerability affects unknown code of the file application/maxsite/admin/plugins/auto_post/uploads-require-maxsite.php of the component HTTP Header Handler. Performing manipulation of the argument X-…

    MaxSite CMS