Skip to content
OpenAdvisories

Vendor

MaxSite

16 known vulnerabilities.

Products

CMS 9 MaxSite CMS 7
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-87928

    MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_page

    MaxSite CMS versions 0.94 through 109.6 contain a cross-site scripting vulnerability in the admin_page upload handler that allows any logged-in user to upload HTML files. Attackers can upload HTML containing malicious scripts to the uploads/_pages/ directory,…

    MaxSite MaxSite CMS
  • Medium 6.3
    CVE-2025-12347

    MaxSite CMS save-file-ajax.php unrestricted upload

    A flaw has been found in MaxSite CMS up to 109. This issue affects some unknown processing of the file application/maxsite/admin/plugins/editor_files/save-file-ajax.php. Executing manipulation of the argument file_path/content can lead to unrestricted upload.…

    MaxSite CMS
  • Medium 6.3
    CVE-2025-12346

    MaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted upload

    A vulnerability was detected in MaxSite CMS up to 109. This vulnerability affects unknown code of the file application/maxsite/admin/plugins/auto_post/uploads-require-maxsite.php of the component HTTP Header Handler. Performing manipulation of the argument X-…

    MaxSite CMS