CVE-2022-25410: Max-3000 Maxsite CMS

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files.

Affected products

• Max-3000 Maxsite CMS: version 108 only

Published 2022-02-28. Last modified 2026-06-17.