CVE-2021-35265: Maxsite CMS

Medium severity, CVSS 6.1. EPSS: 3.4% chance of exploitation in the next 30 days.

A reflected cross-site scripting (XSS) vulnerability in MaxSite CMS before V106 via product/page/* allows remote attackers to inject arbitrary web script to a page.

Affected products

• Maxsite Maxsite CMS: before 106 (fixed in 106)

Published 2021-08-03. Last modified 2026-06-17.