Lucene search
+L

2 matches found

NVD
NVD
•added 2025/10/28 3:15 a.m.•19 views

CVE-2025-12346

A vulnerability was detected in MaxSite CMS up to 109. This vulnerability affects unknown code of the file application/maxsite/admin/plugins/autopost/uploads-require-maxsite.php of the component HTTP Header Handler. Performing manipulation of the argument X-Requested-FileName/X-Requested-FileUpDi...

8.8CVSS0.00396EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/28 12:00 a.m.•7 views

CVE-2025-12346: Unrestricted Upload of File with Dangerous Type

A vulnerability was detected in MaxSite CMS up to 109. This vulnerability affects unknown code of the file application/maxsite/admin/plugins/autopost/uploads-require-maxsite.php of the component HTTP Header Handler. Performing manipulation of the argument X-Requested-FileName/X-Requested-FileUpDi...

8.8CVSS6.2AI score0.00396EPSS
SaveExploits1References6
Rows per page
Query Builder