CVE-2026-3395: Code Injection Vulnerability in MaxSite CMS
First seen 2 Mar 2026, 11:09 UTC
•
•76% similarity
•39.9
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
A code injection vulnerability has been identified in MaxSite CMS versions up to 109.1, affecting the MarkItUp Preview AJAX Endpoint. This flaw allows remote attackers to execute arbitrary code via manipulated input sent to the eval function. Users are advised to upgrade to version 109.2, which includes a patch to address this issue.
ThreatCluster AI
Timeline
2026-03-01
CVE-2026-3395 published
2026-03-01
Vuldb article published with technical details of the exploit
2026-03-02
Radar.Offseq article published detailing the vulnerability