MA
Vendor
MaxSite
19
CVEs
0
On KEV
0
New 30D
Products
CM9.8
CMS
MaxSite
9 CVEs0 on KEV0 new
MC9.8
MaxSite CMS
MaxSite
9 CVEs0 on KEV0 new
MA–
Maxsite
Maxsite
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-87930 | MC MaxSite CMS MaxSite | 8.1 | Sep 9 | MaxSite CMS through 109.6 PHP Object Injection via ci_session |
| CVE-2026-87929 | MC MaxSite CMS MaxSite | 9.8 | Sep 9 | MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key |
| CVE-2026-87928 | MC MaxSite CMS MaxSite | 5.4 | Sep 9 | MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_page |
| CVE-2026-87927 | MC MaxSite CMS MaxSite | 8.2 | Sep 9 | MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcher |
| CVE-2026-70554 | MC MaxSite CMS MaxSite | 9.8 | Aug 4 | MaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser Cookie |
| CVE-2026-70553 | MC MaxSite CMS MaxSite | 9.8 | Aug 4 | MaxSite CMS Unauthenticated RCE via Install Endpoint |
| CVE-2026-70552 | MC MaxSite CMS MaxSite | 9.8 | Aug 4 | MaxSite CMS 109.5 Unauthenticated AJAX Dispatcher Bypass via ajax.php |
| CVE-2026-7016 | CM CMS MaxSite | 2.4 | Apr 26 | MaxSite CMS ushki Plugin cross site scripting |
| CVE-2026-7015 | CM CMS MaxSite | 2.4 | Apr 26 | MaxSite CMS Guestbook Plugin cross site scripting |
| CVE-2026-7014 | CM CMS MaxSite | 2.4 | Apr 26 | MaxSite CMS down_count Plugin cross site scripting |
| CVE-2026-7013 | CM CMS MaxSite | 2.4 | Apr 26 | MaxSite CMS mail_send Plugin cross site scripting |
| CVE-2026-7012 | CM CMS MaxSite | 2.4 | Apr 26 | MaxSite CMS Redirect Plugin cross site scripting |
| CVE-2026-7011 | CM CMS MaxSite | 2.4 | Apr 26 | MaxSite CMS Antispam Plugin plugin_antispam cross site scripting |
| CVE-2026-3395 | CM CMS MaxSite | 9.8 | Mar 1 | MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injection |
| CVE-2025-12347 | CM CMS MaxSite | 8.8 | Oct 28 | MaxSite CMS save-file-ajax.php unrestricted upload |
| CVE-2025-12346 | CM CMS MaxSite | 8.8 | Oct 28 | MaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted upload |
| CVE-2023-36291 | MC Maxsite Cms Maxsite | 6.1 | Jul 3 | Cross Site Scripting vulnerability in Maxsite CMS v.108.7 allows a remote attacker to execute arbitrary code via the f_content parameter in the admin/page_new file |
| CVE-2021-35265 | MC Maxsite Cms Maxsite | 6.1 | Aug 3 | A reflected cross-site scripting (XSS) vulnerability in MaxSite CMS before V106 via product/page/* allows remote attackers to inject arbitrary web script to a page |
| CVE-2008-2487 | MA Maxsite Maxsite | – | May 28 | SQL injection vulnerability in index.php in MAXSITE 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter in a webboard action |