CVE-2026-7011: MaxSite CMS Antispam Plugin plugin_antispam cross site scripting
A weakness has been identified in MaxSite CMS up to 109.3. Affected by this vulnerability is an unknown functionality of the file /admin/pluginantispam of the component Antispam Plugin. Executing a manipulation of the argument floggingfile can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. Upgrading to version 109.4 addresses this issue. This patch is called 8a3946bd0a54bfb72a4d57179fcd253f2c550cd7. Upgrading the affected component is advised. The vendor was informed early about this issue. They classify it as a "Self-XSS". They deployed a countermeasure: "Nevertheless, we consider this a violation of secure coding standards. The lack of filtering via htmlspecialchars() has already been fixed in the latest patch to prevent incorrect data display."
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
MaxSite CMS Antispam Plugin (plugin_antispam)to a version that resolves this vulnerability.Fixed in 109.4Patch 8a3946bd0a54bfb72a4d57179fcd253f2c550cd7 - Operational
Apply the latest patch/upgrade that fixes the missing filtering via `htmlspecialchars()` in the Antispam Plugin to prevent incorrect data display and XSS via the `f_logging_file` argument.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7011?
CVE-2026-7011 has been classified with a medium severity level due to its potential for cross-site scripting attacks.
How do I fix CVE-2026-7011?
To remediate CVE-2026-7011, upgrade the MaxSite CMS Antispam Plugin to version 109.4 or later.
What type of vulnerability is CVE-2026-7011?
CVE-2026-7011 is a cross-site scripting (XSS) vulnerability affecting the Antispam Plugin of MaxSite CMS.
Which versions of MaxSite CMS are affected by CVE-2026-7011?
CVE-2026-7011 affects all versions of MaxSite CMS Antispam Plugin up to and including 109.3.
What can happen if CVE-2026-7011 is exploited?
If CVE-2026-7011 is exploited, attackers can execute arbitrary JavaScript code in the context of the victim's browser, potentially compromising user data.