CVE-2022-25410

Maxsite CMS v180 was discovered to contain a stored cross-site scripting XSS vulnerability via the parameter ffiledescription at /admin/files...

CVE-2022-25410

MaxSite CMS v180 is vulnerable to a stored XSS via the parameter f_file_description in /admin/files. The root cause is insufficient validation/sanitization of user-supplied data when handling file descriptions, allowing injected script to be stored and later executed in the victim’s browser. Repo...