Login Request a demo
MC
Product
MaxSite CMS
by MaxSite · last CVE Sep 9, 2026
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 4High 2Medium 3Low 0
Severity
All severities9Critical4High2Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MaxSite CMS to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-87929
9.8
1%
Sep 9
MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key
Affected: 0.78 through 109.6
CVE-2026-70554
9.8
1%
Aug 4
MaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser Cookie
Affected: 0.78 through 109.5
CVE-2026-70553
9.8
1%
Aug 4
MaxSite CMS Unauthenticated RCE via Install Endpoint
Affected: 105.2 through 109.5
CVE-2026-70552
9.8
1%
Aug 4
MaxSite CMS 109.5 Unauthenticated AJAX Dispatcher Bypass via ajax.php
Affected: 0.78 through 109.5
CVE-2026-87927
8.2
1%
Sep 9
MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcher
Affected: 0.78 through 109.6
CVE-2026-87930
8.1
1%
Sep 9
MaxSite CMS through 109.6 PHP Object Injection via ci_session
Affected: 0.78 through 109.6
CVE-2023-36291
6.1
0%
Jul 3
Cross Site Scripting vulnerability in Maxsite CMS v.108.7 allows a remote attacker to execute arbitrary code via the f_content parameter in the admin/page_new file
Affected: 108.7
CVE-2021-35265
6.1
3%
Aug 3
A reflected cross-site scripting (XSS) vulnerability in MaxSite CMS before V106 via product/page/* allows remote attackers to inject arbitrary web script to a page
Affected: before 106
CVE-2026-87928
5.4
0%
Sep 9
MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_page
Affected: 0.94 through 109.6
Showing 9