7 matches found
CVE-2026-7013
A security vulnerability has been detected in MaxSite CMS up to 109.3. Affected by this issue is some unknown functionality of the component mailsend Plugin. The manipulation of the argument fsubject/ffiles/ffrom leads to cross site scripting. The attack can be initiated remotely. The exploit has...
EUVD-2026-25689
A security vulnerability has been detected in MaxSite CMS up to 109.3. Affected by this issue is some unknown functionality of the component mailsend Plugin. The manipulation of the argument fsubject/ffiles/ffrom leads to cross site scripting. The attack can be initiated remotely. The exploit has...
CVE-2026-7013
A security vulnerability has been detected in MaxSite CMS up to 109.3. Affected by this issue is some unknown functionality of the component mailsend Plugin. The manipulation of the argument fsubject/ffiles/ffrom leads to cross site scripting. The attack can be initiated remotely. The exploit has...
CVE-2026-7013
MaxSite CMS (up to 109.3) contains a cross-site scripting (XSS) vulnerability in the mail_send plugin. An attacker can manipulate the f_subject, f_files, or f_from parameters to trigger XSS, with remote initiation and public disclosure of the exploit. The issue affects an unknown functionality wi...
CVE-2026-7013 MaxSite CMS mail_send Plugin cross site scripting
A security vulnerability has been detected in MaxSite CMS up to 109.3. Affected by this issue is some unknown functionality of the component mailsend Plugin. The manipulation of the argument fsubject/ffiles/ffrom leads to cross site scripting. The attack can be initiated remotely. The exploit has...
MaxSite CMS 跨站脚本漏洞
MaxSite CMS is an open-source website content management system developed by MaxSite in Russia. Versions of MaxSite CMS prior to 109.3 contained a cross-site scripting vulnerability. This vulnerability stemmed from the operations involving parameters fsubject, ffiles, and ffrom in the mailsend...
CVE-2026-7013: Improper Neutralization of Input During Web Page Generation
A security vulnerability has been detected in MaxSite CMS up to 109.3. Affected by this issue is some unknown functionality of the component mailsend Plugin. The manipulation of the argument fsubject/ffiles/ffrom leads to cross site scripting. The attack can be initiated remotely. The exploit has...