max-3000 records

8 published records for vendor max-3000.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 3
With a fix record: 12.5%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2021-27983No exploit	Remote Code Execution (RCE) vulnerability exists in MaxSite CMS v107.5 via the Documents page.max-3000 · maxsite cms pre-auth RCE	Critical9.8	—	3.6%	Dec 10, 2021
40Plan	CVE-2022-25411No exploit	A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted Pmax-3000 · maxsite cms · CWE-434 pre-auth RCE File upload	Critical9.8	—	3.0%	Feb 28, 2022
32Monitor	CVE-2022-25412No exploit	Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via themax-3000 · maxsite cms · CWE-22 Path traversal	High8.1	—	1.1%	Feb 28, 2022
23Monitor	CVE-2026-3395Proof of concept	MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injectionmax-3000 · maxsite cms · CWE-74 pre-auth RCE	Medium5.5	—	2.5%	Mar 1, 2026
21Monitor	CVE-2022-25413No exploit	Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3.max-3000 · maxsite cms · CWE-79 XSS	Medium5.4	—	0.5%	Feb 28, 2022
21Monitor	CVE-2022-25410No exploit	Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/max-3000 · maxsite cms · CWE-79 XSS	Medium5.4	—	0.5%	Feb 28, 2022
8Monitor	CVE-2025-12346No exploit	MaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted uploadmax-3000 · maxsite cms · CWE-284 File upload Broken access control (IDOR)	Low2.1	—	0.4%	Oct 28, 2025
8Monitor	CVE-2025-12347No exploit	MaxSite CMS save-file-ajax.php unrestricted uploadmax-3000 · maxsite cms · CWE-284 File upload Broken access control (IDOR)	Low2.1	—	0.4%	Oct 28, 2025

CVE-2021-27983
40Plan
Remote Code Execution (RCE) vulnerability exists in MaxSite CMS v107.5 via the Documents page.
CriticalCVSS 9.8No exploitEPSS 4%
- pre-auth RCE
max-3000 · maxsite cmsDec 10, 2021
CVE-2022-25411
40Plan
A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted P
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- File upload
max-3000 · maxsite cmsFeb 28, 2022
CVE-2022-25412
32Monitor
Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the
HighCVSS 8.1No exploitEPSS 1%
- Path traversal
max-3000 · maxsite cmsFeb 28, 2022
CVE-2026-3395
23Monitor
MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injection
MediumCVSS 5.5Proof of conceptEPSS 2%
- pre-auth RCE
max-3000 · maxsite cmsMar 1, 2026
CVE-2022-25413
21Monitor
Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3.
MediumCVSS 5.4No exploitEPSS 0%
- XSS
max-3000 · maxsite cmsFeb 28, 2022
CVE-2022-25410
21Monitor
Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/
MediumCVSS 5.4No exploitEPSS 0%
- XSS
max-3000 · maxsite cmsFeb 28, 2022
CVE-2025-12346
8Monitor
MaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted upload
LowCVSS 2.1No exploitEPSS 0%
- File upload
- Broken access control (IDOR)
max-3000 · maxsite cmsOct 28, 2025
CVE-2025-12347
8Monitor
MaxSite CMS save-file-ajax.php unrestricted upload
LowCVSS 2.1No exploitEPSS 0%
- File upload
- Broken access control (IDOR)
max-3000 · maxsite cmsOct 28, 2025