Vulnerabilities in MaxSite
16 resultsCVE-2026-3395MEDIUMMaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injectionEPSS 4.0%CVE-2026-70553CRITICALMaxSite CMS Unauthenticated RCE via Install EndpointEPSS 1.3%CVE-2026-70554CRITICALMaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser CookieEPSS 1.2%CVE-2026-70552CRITICALMaxSite CMS 109.5 Unauthenticated AJAX Dispatcher Bypass via ajax.phpEPSS 0.8%CVE-2026-87930CRITICALMaxSite CMS through 109.6 PHP Object Injection via ci_sessionEPSS 0.6%CVE-2026-87927HIGHMaxSite CMS through 109.6 Local File Inclusion via ajax dispatcherEPSS 0.6%CVE-2026-87929CRITICALMaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption KeyEPSS 0.5%CVE-2025-12346MEDIUMMaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted uploadEPSS 0.4%CVE-2025-12347MEDIUMMaxSite CMS save-file-ajax.php unrestricted uploadEPSS 0.4%CVE-2026-87928MEDIUMMaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_pageEPSS 0.3%CVE-2026-7012MEDIUMMaxSite CMS Redirect Plugin cross site scriptingEPSS 0.3%CVE-2026-7011MEDIUMMaxSite CMS Antispam Plugin plugin_antispam cross site scriptingEPSS 0.3%CVE-2026-7014MEDIUMMaxSite CMS down_count Plugin cross site scriptingEPSS 0.3%CVE-2026-7016MEDIUMMaxSite CMS ushki Plugin cross site scriptingEPSS 0.2%CVE-2026-7015MEDIUMMaxSite CMS Guestbook Plugin cross site scriptingEPSS 0.2%CVE-2026-7013MEDIUMMaxSite CMS mail_send Plugin cross site scriptingEPSS 0.2%