What’s Vulnerable › Vulnerabilities
CVE-2022-25412
- Severity: high (CVSS 8.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.1% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-02-28 · updated 2026-06-17
- Weakness: CWE-22
Description
Maxsite CMS v180 was discovered to contain multiple arbitrary file deletion vulnerabilities in /admin_page/all-files-update-ajax.php via the dir and deletefile parameters.
Affected products
- MaxSite CMS: 108
References
Get alerted when CVE-2022-25412 or the next vulnerability affects your stack