CVE-2026-37700: XSS

Published Jun 3, 2026

Updated

Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via the Backend page file upload endpoint used by adminpage

Affected Software

1 affected component

MaxSite CMS MaxSite CMS=109.2

Event History

Jun 3, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-37700?

The severity of CVE-2026-37700 is classified as medium with a CVSS score of 4.1.

What is CVE-2026-37700?

CVE-2026-37700 is a Cross Site Scripting vulnerability in MaxSite CMS v.109.2 that allows a remote attacker to obtain sensitive information.

How do I fix CVE-2026-37700?

To mitigate CVE-2026-37700, ensure that your MaxSite CMS is updated to a version that addresses this vulnerability and apply any relevant security patches.

Who is affected by CVE-2026-37700?

Users of MaxSite CMS version 109.2 are affected by CVE-2026-37700 due to its vulnerability in the Backend page file upload endpoint.

What type of vulnerability is CVE-2026-37700?

CVE-2026-37700 is classified as an XSS (Cross Site Scripting) vulnerability.