CVE-2023-36291

MediumCVSS 6.1

Published: 03/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

35th percentile - higher than 35% of all known CVEs

Summary

Maxsite CMS version 108.7 has a Cross Site Scripting vulnerability that allows a remote attacker to execute arbitrary code via the f_content parameter in the admin/page_new file.

Risk Assessment

This vulnerability could lead to an attacker gaining control over the system, posing a serious threat to the organization's data security.

Recommendation

It is recommended to update Maxsite CMS to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.

Original NVD description (English source)

Cross Site Scripting vulnerability in Maxsite CMS v.108.7 allows a remote attacker to execute arbitrary code via the f_content parameter in the admin/page_new file.