MA
Vendor
Max-3000
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-3395 | MC Maxsite Cms Max-3000 | 9.8 | Mar 1 | MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injection |
| CVE-2025-12347 | MC Maxsite Cms Max-3000 | 8.8 | Oct 28 | MaxSite CMS save-file-ajax.php unrestricted upload |
| CVE-2025-12346 | MC Maxsite Cms Max-3000 | 8.8 | Oct 28 | MaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted upload |
| CVE-2022-25413 | MC Maxsite Cms Max-3000 | 5.4 | Feb 28 | Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3 |
| CVE-2022-25412 | MC Maxsite Cms Max-3000 | 8.1 | Feb 28 | Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and deletefile parameters |
| CVE-2022-25411 | MC Maxsite Cms Max-3000 | 9.8 | Feb 28 | A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file |
| CVE-2022-25410 | MC Maxsite Cms Max-3000 | 5.4 | Feb 28 | Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files |
| CVE-2021-27983 | MC Maxsite Cms Max-3000 | 9.8 | Dec 10 | Remote Code Execution (RCE) vulnerability exists in MaxSite CMS v107.5 via the Documents page |