Login Request a demo
MC
Product
Maxsite Cms
by Max-3000 · last CVE Mar 1, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 3High 3Medium 2Low 0
Severity
All severities8Critical3High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Maxsite Cms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-3395
9.8
4%
Mar 1
MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injection
Affected: before 109.2
CVE-2022-25411
9.8
3%
Feb 28
A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file
Affected: 108
CVE-2021-27983
9.8
4%
Dec 10
Remote Code Execution (RCE) vulnerability exists in MaxSite CMS v107.5 via the Documents page
Affected: 107.5
CVE-2025-12347
8.8
0%
Oct 28
MaxSite CMS save-file-ajax.php unrestricted upload
Affected: through 109
CVE-2025-12346
8.8
0%
Oct 28
MaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted upload
Affected: through 109
CVE-2022-25412
8.1
1%
Feb 28
Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and deletefile parameters
Affected: 108
CVE-2022-25413
5.4
0%
Feb 28
Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3
Affected: 108
CVE-2022-25410
5.4
0%
Feb 28
Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files
Affected: 108
Showing 8