VendorsMax-3000maxsite_cmsall versions
Vulnerabilities

Max-3000 MaxSite CMS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2021-27983
Remote Code Execution (RCE) vulnerability exists in MaxSite CMS v107.5 via the Documents page.
Published 2021-12-10 · Modified
9.8EPSS 0.035
CVE-2022-25411
A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file.
Published 2022-02-28 · Modified
9.8EPSS 0.030
CVE-2026-3395
MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injection
Published 2026-03-01 · Analyzed
9.8EPSS 0.025
CVE-2025-12346
MaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted upload
Published 2025-10-28 · Analyzed
8.8EPSS 0.004
CVE-2025-12347
MaxSite CMS save-file-ajax.php unrestricted upload
Published 2025-10-28 · Analyzed
8.8EPSS 0.004
CVE-2022-25412
Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and deletefile parameters.
Published 2022-02-28 · Modified
8.1EPSS 0.011
CVE-2022-25410
Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files.
Published 2022-02-28 · Modified
5.4EPSS 0.005
CVE-2022-25413
Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3.
Published 2022-02-28 · Modified
5.4EPSS 0.005