Max-3000

8 CVEs across 1 Max-3000 products. Browse Max-3000 vulnerabilities, severities, and proof-of-concept exploits.

Max-3000 products with known CVEs

ProductCVEs
Maxsite Cms8
Max-3000 CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-3395High7.32026-03-01A flaw has been found in MaxSite CMS up to 109.1. This impacts the function eval of the file application/maxsite/admin/plugins/editor_markitup/preview-ajax.php…
CVE-2025-12347Medium6.32025-10-28A flaw has been found in MaxSite CMS up to 109. This issue affects some unknown processing of the file application/maxsite/admin/plugins/editor_files/save-file…
CVE-2025-12346Medium6.32025-10-28A vulnerability was detected in MaxSite CMS up to 109. This vulnerability affects unknown code of the file application/maxsite/admin/plugins/auto_post/uploads-…
CVE-2022-25413Medium5.42022-02-28Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3.
CVE-2022-25412High8.12022-02-28Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and deletefile…
CVE-2022-25411Critical9.82022-02-28A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2022-25410Medium5.42022-02-28Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files.
CVE-2021-27983Critical9.82021-12-10Remote Code Execution (RCE) vulnerability exists in MaxSite CMS v107.5 via the Documents page.