CVE-2021-26628: Maxb Maxboard

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Insufficient script validation of the admin page enables XSS, which causes unauthorized users to steal admin privileges. When uploading file in a specific menu, the verification of the files is insufficient. It allows remote attackers to upload arbitrary files disguising them as image files.

Affected products

• Maxb Maxboard: before 1.9.6.1 (fixed in 1.9.6.1)

Published 2022-04-26. Last modified 2026-06-17.