CVE-2022-25412: Max-3000 Maxsite CMS

High severity, CVSS 8.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and deletefile parameters.

Affected products

• Max-3000 Maxsite CMS: version 108 only

Published 2022-02-28. Last modified 2026-06-17.