MMaxSite

Products

Exploited and recent CVEs

• CVE-2026-87930 High 8.1 MaxSite CMS through 109.6 PHP Object Injection via ci_session 0.6%
• CVE-2026-87929 Critical 9.8 MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key 0.5%
• CVE-2026-87928 Medium 5.4 MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_page 0.3%
• CVE-2026-87927 High 8.2 MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcher 0.6%
• CVE-2026-70554 Critical 9.8 MaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser Cookie 1.2%
• CVE-2026-70553 Critical 9.8 MaxSite CMS Unauthenticated RCE via Install Endpoint 1.3%
• CVE-2026-70552 Critical 9.8 MaxSite CMS 109.5 Unauthenticated AJAX Dispatcher Bypass via ajax.php 0.8%
• CVE-2026-7016 Low 2.4 MaxSite CMS ushki Plugin cross site scripting 0.2%
• CVE-2026-7015 Low 2.4 MaxSite CMS Guestbook Plugin cross site scripting 0.2%
• CVE-2026-7014 Low 2.4 MaxSite CMS down_count Plugin cross site scripting 0.3%
• CVE-2026-7013 Low 2.4 MaxSite CMS mail_send Plugin cross site scripting 0.2%
• CVE-2026-7012 Low 2.4 MaxSite CMS Redirect Plugin cross site scripting 0.3%
• CVE-2026-7011 Low 2.4 MaxSite CMS Antispam Plugin plugin_antispam cross site scripting 0.3%
• CVE-2026-3395 High 7.3 MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injection 4.0%
• CVE-2025-12347 Medium 6.3 MaxSite CMS save-file-ajax.php unrestricted upload 0.4%
• CVE-2025-12346 Medium 6.3 MaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted upload 0.4%