Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2026/04/27 7:23 p.m.2 views

CVE-2026-7016

A vulnerability was found in MaxSite CMS up to 109.3. Impacted is an unknown function of the component ushki Plugin. Performing a manipulation of the argument fushkanew/fushk results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been made public and could...

4.8CVSS3.2AI score0.00039EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/26 3:15 a.m.2 views

CVE-2026-7016

A vulnerability was found in MaxSite CMS up to 109.3. Impacted is an unknown function of the component ushki Plugin. Performing a manipulation of the argument fushkanew/fushk results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been made public and could...

4.8CVSS4AI score0.00039EPSS
Exploits0References7Affected Software1
EUVD
EUVD
added 2026/04/26 2:0 a.m.2 views

EUVD-2026-25689

A security vulnerability has been detected in MaxSite CMS up to 109.3. Affected by this issue is some unknown functionality of the component mailsend Plugin. The manipulation of the argument fsubject/ffiles/ffrom leads to cross site scripting. The attack can be initiated remotely. The exploit has...

4.8CVSS2.9AI score0.00039EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2026/04/26 12:30 a.m.0 views

CVE-2026-7011 MaxSite CMS Antispam Plugin plugin_antispam cross site scripting

A weakness has been identified in MaxSite CMS up to 109.3. Affected by this vulnerability is an unknown functionality of the file /admin/pluginantispam of the component Antispam Plugin. Executing a manipulation of the argument floggingfile can lead to cross site scripting. It is possible to launc...

4.8CVSS3.2AI score0.00013EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/04/26 12:0 a.m.4 views

PT-2026-35198

A vulnerability was found in MaxSite CMS up to 109.3. Impacted is an unknown function of the component ushki Plugin. Performing a manipulation of the argument f ushka new/f ushk results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been made public and...

4.8CVSS3.4AI score0.00039EPSS
Exploits0References8
Rows per page
Query Builder