MaxSite CMS Cross-Site Scripting Vulnerability (CNVD-2022-33826) (CVE-2022-25413)

MaxSite CMS is a web content management system of the Russian MaxSite CMS open source project.MaxSite CMS 108 has a cross-site scripting vulnerability that can be exploited by attackers to perform cross-site scripting attacks via the ftags parameter in /admin/pageedit/3...

CVE-2022-25413

creationtimestamp| type| source ---|---|--- 2022-03-01 02:28:39+00:00| seen| https://t.me/cibsecurity/38219...

CVE-2022-25413

Maxsite CMS v108 is affected by a stored cross-site scripting (XSS) vulnerability through the f_tags parameter in /admin/page_edit/3 . The issue is evidenced across multiple sources (NVD, CNVD, Red Hat, OSV, CVE listings) under CVE-2022-25413, confirming the vulnerable component and entry. The pr...