https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T03:04:37.160996+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-87928 CVE-2026-87928 — MaxSite CMS 0.94 through 109.6 HTML Upload XSS via admin_page 2026-10-08T03:04:37.182538+00:00

Affected: MaxSite CMS

MaxSite CMS versions 0.94 through 109.6 contain a cross-site scripting vulnerability in the admin_page upload handler that allows any logged-in user to upload HTML files. Attackers can upload HTML containing malicious scripts to the uploads/_pages/ directory, which executes in visitors' browsers when the file is accessed, enabling persistent stored cross-site scripting attacks.