CVE-2022-25411

CRITICAL CVSS: 9.8 Published: 2022-02-28 Modified: 2026-06-17

Description

A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file.

Affected Platforms

Max-3000 Maxsite Cms

Weakness Type

CWE-434

References