Vulnerabilities in MaxSite
12 resultsVexday analysis
MaxSite apresenta 9 vulnerabilidades catalogadas, com 6 publicadas nos últimos 90 dias, indicando descoberta contínua de falhas. Nenhuma vulnerabilidade está sob exploração ativa (KEV) e não há críticas confirmadas, reduzindo o risco imediato. A fraqueza dominante é CWE-94 (execução de código não controlado), que merece monitoramento pela natureza severa dessa classe.
CVE-2026-70553CRITICALMaxSite CMS Unauthenticated RCE via Install EndpointEPSS 0.9%CVE-2026-70554CRITICALMaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser CookieEPSS 0.9%CVE-2026-3395MEDIUMMaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injectionEPSS 0.8%CVE-2026-70552CRITICALMaxSite CMS 109.5 Unauthenticated AJAX Dispatcher Bypass via ajax.phpEPSS 0.6%CVE-2025-12347MEDIUMMaxSite CMS save-file-ajax.php unrestricted uploadEPSS 0.4%CVE-2025-12346MEDIUMMaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted uploadEPSS 0.4%CVE-2026-7012MEDIUMMaxSite CMS Redirect Plugin cross site scriptingEPSS 0.3%CVE-2026-7014MEDIUMMaxSite CMS down_count Plugin cross site scriptingEPSS 0.3%CVE-2026-7011MEDIUMMaxSite CMS Antispam Plugin plugin_antispam cross site scriptingEPSS 0.3%CVE-2026-7016MEDIUMMaxSite CMS ushki Plugin cross site scriptingEPSS 0.2%CVE-2026-7015MEDIUMMaxSite CMS Guestbook Plugin cross site scriptingEPSS 0.2%CVE-2026-7013MEDIUMMaxSite CMS mail_send Plugin cross site scriptingEPSS 0.2%