🕵️ CVE-2026-7014 | MaxSite CMS up to 109.3 down_count Plugin f_file/f_prefix cross site scripting (CNNVD-202604-5134)

A vulnerability has been found in MaxSite CMS up to 109.3 and classified as problematic. This vulnerability affects unknown code of the component down_count Plugin. This manipulation of the argument f_file/f_prefix causes cross site scripting.

This vulnerability appears as CVE-2026-7014. The attack may be initiated remotely. In addition, an...