Lucene search
+L

2 matches found

NVD
NVD
•added 2025/10/28 3:15 a.m.•17 views

CVE-2025-12346

A vulnerability was detected in MaxSite CMS up to 109. This vulnerability affects unknown code of the file application/maxsite/admin/plugins/autopost/uploads-require-maxsite.php of the component HTTP Header Handler. Performing manipulation of the argument X-Requested-FileName/X-Requested-FileUpDi...

8.8CVSS0.00365EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/28 12:00 a.m.•2 views

CVE-2025-12346: Unrestricted Upload of File with Dangerous Type

A vulnerability was detected in MaxSite CMS up to 109. This vulnerability affects unknown code of the file application/maxsite/admin/plugins/autopost/uploads-require-maxsite.php of the component HTTP Header Handler. Performing manipulation of the argument X-Requested-FileName/X-Requested-FileUpDi...

8.8CVSS5.3AI score0.00365EPSS
SaveExploits1References1
Rows per page
Query Builder