max-3000

Top products

The 8 most recently published vulnerabilities affecting max-3000.

• CVE-2026-3395MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injection7.3Mar 1, 2026
• CVE-2025-12347MaxSite CMS save-file-ajax.php unrestricted upload6.3Oct 28, 2025
• CVE-2025-12346MaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted upload6.3Oct 28, 2025
• CVE-2022-25413Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3.5.4Feb 28, 2022
• CVE-2022-25412Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and deletefile parameters.8.1Feb 28, 2022
• CVE-2022-25411A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file.9.8Feb 28, 2022
• CVE-2022-25410Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files.5.4Feb 28, 2022
• CVE-2021-27983Remote Code Execution (RCE) vulnerability exists in MaxSite CMS v107.5 via the Documents page.9.8Dec 10, 2021