Cross Site Scripting Vulnerability in MaxSite CMS by MaxSite
CVE-2026-37700

4.1MEDIUM

Key Information:

Vendor

MaxSite

Status
MaxSite CMS
Vendor
CVE Published:
3 June 2026

What is CVE-2026-37700?

MaxSite CMS version 109.2 is affected by a Cross Site Scripting vulnerability that allows remote attackers to exploit the file upload endpoint accessed through the admin_page. This flaw can enable unauthorized access to sensitive information, posing serious risks to the integrity and confidentiality of the web application.

References

https://github.com/PureStream108/CVE/blob/main/MaxSite109...

CVSS V3.1

Score:
4.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.