Max-3000 vulnerabilities
We track 4 vulnerabilities in Max-3000 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 1, 2026.
Latest Max-3000 vulnerabilities
- 9.8 Critical severity
CMS: Improper Control of Generation of Code
A flaw has been found in MaxSite CMS up to 109.1. This impacts the function eval of the file application/maxsite/admin/plugins/editor_markitup/preview-ajax.php of the component MarkItUp Preview AJAX Endpoint. Executing a manipulation can lead to code injection
- 8.8 High severity
CMS: Unrestricted Upload of File with Dangerous Type
A flaw has been found in MaxSite CMS up to 109. This issue affects some unknown processing of the file application/maxsite/admin/plugins/editor_files/save-file-ajax.php. Executing manipulation of the argument file_path/content can lead to unrestricted upload.
- 8.8 High severity
CMS: Unrestricted Upload of File with Dangerous Type
A vulnerability was detected in MaxSite CMS up to 109. This vulnerability affects unknown code of the file application/maxsite/admin/plugins/auto_post/uploads-require-maxsite.php of the component HTTP Header Handler. Performing manipulation of the argument X-R
- 8.1 High severity
Maxsite CMS: Improper Limitation of a Pathname to a Restricted Directory
Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and deletefile parameters.