CVE-2026-7014

A flaw has been found in MaxSite CMS up to 109.3. This vulnerability affects unknown code of the component downcount Plugin. This manipulation of the argument ffile/fprefix causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading...

CVE-2026-7014

CVE-2026-7014 describes a cross-site scripting flaw in MaxSite CMS up to version 109.3, affecting the down_count Plugin via manipulation of the f_file/f_prefix argument. The vulnerability allows remote initiation and is tied to an inadequate data filtering path (Self-XSS label noted by the vendor...