Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Nguyenngocquang700

#43303de 53,633
6.1CVSS total
Vulnerabilidades · 1
PT-2023-25516
6.1
2023-07-03
Unknown · Maxsite Cms · CVE-2023-36291
**Name of the Vulnerable Software and Affected Versions** Maxsite CMS version 108.7 **Description** The issue allows a remote attacker to execute arbitrary code via the `f content` parameter in the "admin/page new" file. This is a Cross Site Scripting vulnerability. **Recommendations** For Maxsite CMS version 108.7, consider disabling access to the "admin/page new" file or restricting the use of the `f content` parameter until a patch is available. Avoid using the `f content` parameter in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.