CVE-2021-35265

A reflected cross-site scripting XSS vulnerability in MaxSite CMS before V106 via product/page/ allows remote attackers to inject arbitrary web script to a page...

CVE-2021-35265

CVE-2021-35265 is a reflected cross-site scripting vulnerability in MaxSite CMS before version V106, exploitable via the path through product/page/ . The issue allows an attacker to inject arbitrary JavaScript into pages viewed by victims, potentially leading to session hijacking, defacement, or ...