CVE-2026-7013: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in MaxSite CMS up to 109.3. Affected by this issue is some unknown functionality of the component mailsend Plugin. The manipulation of the argument fsubject/ffiles/ffrom leads to cross site scripting. The attack can be initiated remotely. The exploit has...

MaxSite CMS 跨站脚本漏洞

MaxSite CMS is an open-source website content management system developed by MaxSite in Russia. Versions of MaxSite CMS prior to 109.3 contained a cross-site scripting vulnerability. This vulnerability stemmed from the operations involving parameters fsubject, ffiles, and ffrom in the mailsend...