CVE-2026-37700

creationtimestamp| type| source ---|---|--- 2026-06-03 20:51:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnfyf7fuh42g...

CVE-2026-37700

MaxSite CMS v.109.2 is affected by a Cross Site Scripting (XSS) vulnerability via the Backend page file upload endpoint used by admin_page. The CVE-2026-37700 description states an attacker can obtain sensitive information through this endpoint. CVSS v3.1 score is 4.1 (Medium); attack vector Netw...