Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter f_file_description at /admin/files.Referenceshttps://github.com/maxsite/cms/issues/485