MaxSite vulnerabilities

CVEs per yearBy the year they were published

1. 20252
2. 202614

Newest CVEs

• CVE-2026-87930

  MaxSite CMS through 109.6 PHP Object Injection via ci_session

  MaxSite · MaxSite CMS

  Critical9.2
• CVE-2026-87929

  MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key

  MaxSite · MaxSite CMS

  Critical9.3
• CVE-2026-87928

  MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_page

  MaxSite · MaxSite CMS

  Medium5.1
• CVE-2026-87927

  MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcher

  MaxSite · MaxSite CMS

  High8.8
• CVE-2026-70554

  MaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser Cookie

  MaxSite · MaxSite CMS

  Critical9.3
• CVE-2026-70553

  MaxSite CMS Unauthenticated RCE via Install Endpoint

  MaxSite · MaxSite CMS

  Critical9.3
• CVE-2026-70552

  MaxSite CMS 109.5 Unauthenticated AJAX Dispatcher Bypass via ajax.php

  MaxSite · MaxSite CMS

  Critical9.3
• CVE-2026-7016

  MaxSite CMS ushki Plugin cross site scripting

  MaxSite · CMS

  Medium4.8
• CVE-2026-7015

  MaxSite CMS Guestbook Plugin cross site scripting

  MaxSite · CMS

  Medium4.8
• CVE-2026-7014

  MaxSite CMS down_count Plugin cross site scripting

  MaxSite · CMS

  Medium4.8