CVE-2022-25412

2022-02-2823:15:12

Google

osv.dev

maxsite cms

arbitrary file deletion

admin_page.

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

29.8%

JSON

Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and deletefile parameters.

References

github.com/maxsite/cms/issues/486