<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: maxsite-cms</title><description>Every new CVE for maxsite-cms.</description><link>https://agentprime.io/</link><item><title>CVE-2026-87930: MaxSite CMS through 109.6 PHP Object Injection via ci_session</title><link>https://agentprime.io/advisories/CVE-2026-87930/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-87930/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Sep 2026 16:45:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-87929: MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key</title><link>https://agentprime.io/advisories/CVE-2026-87929/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-87929/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Sep 2026 16:45:00 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-87928: MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_page</title><link>https://agentprime.io/advisories/CVE-2026-87928/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-87928/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Sep 2026 16:44:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-87927: MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcher</title><link>https://agentprime.io/advisories/CVE-2026-87927/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-87927/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Sep 2026 16:44:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-70554: MaxSite CMS Unauthenticated PHP Object Injection via maxsite_comuser Cookie</title><link>https://agentprime.io/advisories/CVE-2026-70554/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-70554/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 04 Aug 2026 20:11:55 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-70553: MaxSite CMS Unauthenticated RCE via Install Endpoint</title><link>https://agentprime.io/advisories/CVE-2026-70553/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-70553/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 04 Aug 2026 19:37:43 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-70552: MaxSite CMS 109.5 Unauthenticated AJAX Dispatcher Bypass via ajax.php</title><link>https://agentprime.io/advisories/CVE-2026-70552/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-70552/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 04 Aug 2026 19:28:27 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-7016: MaxSite CMS ushki Plugin cross site scripting</title><link>https://agentprime.io/advisories/CVE-2026-7016/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-7016/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 26 Apr 2026 03:15:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-7015: MaxSite CMS Guestbook Plugin cross site scripting</title><link>https://agentprime.io/advisories/CVE-2026-7015/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-7015/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 26 Apr 2026 02:45:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-7014: MaxSite CMS down_count Plugin cross site scripting</title><link>https://agentprime.io/advisories/CVE-2026-7014/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-7014/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 26 Apr 2026 02:30:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-7013: MaxSite CMS mail_send Plugin cross site scripting</title><link>https://agentprime.io/advisories/CVE-2026-7013/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-7013/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 26 Apr 2026 02:00:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-7012: MaxSite CMS Redirect Plugin cross site scripting</title><link>https://agentprime.io/advisories/CVE-2026-7012/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-7012/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 26 Apr 2026 01:15:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-7011: MaxSite CMS Antispam Plugin plugin_antispam cross site scripting</title><link>https://agentprime.io/advisories/CVE-2026-7011/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-7011/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 26 Apr 2026 00:30:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3395: MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injection</title><link>https://agentprime.io/advisories/CVE-2026-3395/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3395/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 01 Mar 2026 14:02:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12347: MaxSite CMS save-file-ajax.php unrestricted upload</title><link>https://agentprime.io/advisories/CVE-2025-12347/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12347/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 28 Oct 2025 02:02:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12346: MaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted upload</title><link>https://agentprime.io/advisories/CVE-2025-12346/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12346/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 28 Oct 2025 02:02:09 GMT</pubDate><category>CVE</category></item></channel></rss>