Skip to content
OpenAdvisories

Product · MaxSite

MaxSite CMS

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2026-87928

    MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_page

    MaxSite CMS versions 0.94 through 109.6 contain a cross-site scripting vulnerability in the admin_page upload handler that allows any logged-in user to upload HTML files. Attackers can upload HTML containing malicious scripts to the uploads/_pages/ directory,…

    MaxSite MaxSite CMS