Medium severity4.1NVD Advisory· Published Jun 3, 2026· Updated Jun 5, 2026

CVE-2026-37700

Description

Cross Site Scripting vulnerability in MaxSite CMS v.109.2 allows a remote attacker to obtain sensitive information via the Backend page file upload endpoint used by admin_page

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Maxsite CMSinferred
Range: <=109.2
Package: https://wordpress.org/plugins/maxsite-cms
Maxsite/Maxsitellm-fuzzy
Range: =109.2

Patches

Vulnerability mechanics

References

maxsite.comnvd
github.com/PureStream108/CVE/blob/main/MaxSite109.2/about_en.mdnvd

News mentions

No linked articles in our index yet.

cvss	0.267
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000