CVE-2026-37700

creationtimestamp| type| source ---|---|--- 2026-06-03 20:51:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnfyf7fuh42g...

CVE-2026-37700

A Cross-Site Scripting (XSS) vulnerability exists in MaxSite CMS v.109.2 , an open-source content management system. The flaw is located in the Backend page file upload endpoint used by the admin_page . A remote attacker can exploit this vulnerability to obtain sensitive information . No newer ve...