CVE-2022-25411

EPSS 2.8%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 2.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

28 Feb 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file.

Affected products

Want to know if your infrastructure is exposed to this?

References