CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 28/10/2025 |
| CVE-2022-25413 | MEDIO5.4 | Maxsite CMS v108 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_tags at /admin/page_edit/3. | 28/02/2022 |
| CVE-2022-25412 | ALTO8.1 | Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and deletefile parameters. | 28/02/2022 |
| CVE-2022-25411 | CRITICO9.8 | A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file. | 28/02/2022 |
| CVE-2022-25410 | MEDIO5.4 | Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files. | 28/02/2022 |
| CVE-2021-27983 | CRITICO9.8 | Remote Code Execution (RCE) vulnerability exists in MaxSite CMS v107.5 via the Documents page. | 10/12/2021 |