Vulnerability index

Browse CVEs

8 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Maxsite Cms CRITICAL 9.8
CVE-2026-3395

A flaw has been found in MaxSite CMS up to 109.1. This impacts the function eval of the file application/maxsite/admin/plugins/editor_markitup/previe…

Fix: 109.2+
Fix from $2,300 2026-03-01
Maxsite Cms HIGH 8.8
CVE-2025-12347

A flaw has been found in MaxSite CMS up to 109. This issue affects some unknown processing of the file application/maxsite/admin/plugins/editor_files…

Fix: after 109
Fix from $1,950 2025-10-28
Maxsite Cms HIGH 8.8
CVE-2025-12346

A vulnerability was detected in MaxSite CMS up to 109. This vulnerability affects unknown code of the file application/maxsite/admin/plugins/auto_pos…

Fix: after 109
Fix from $1,950 2025-10-28
Maxsite Cms CRITICAL 9.8
CVE-2022-25411

A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file.

No fix yet
Fix from $2,300 2022-02-28
Maxsite Cms HIGH 8.1
CVE-2022-25412

Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and …

Patch available
Fix from $1,950 2022-02-28
Maxsite Cms MEDIUM 5.4
CVE-2022-25410

Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files.

Patch available
Fix from $1,600 2022-02-28
Maxsite Cms MEDIUM 5.4
CVE-2022-25413

Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3.

Patch available
Fix from $1,600 2022-02-28
Maxsite Cms CRITICAL 9.8
CVE-2021-27983

Remote Code Execution (RCE) vulnerability exists in MaxSite CMS v107.5 via the Documents page.

No fix yet
Fix from $2,300 2021-12-10