CVE-2022-25413: Max-3000 Maxsite CMS

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3.

Affected products

• Max-3000 Maxsite CMS: version 108 only

Published 2022-02-28. Last modified 2026-06-17.