Is there a public PoC exploit available for CVE-2025-12347?

Yes, a public proof-of-concept exploit is available for CVE-2025-12347. Prioritise patching immediately. EPSS: 0.1%.

MaxSite CMS CVE-2025-12347

Q: What is the CVSS score of CVE-2025-12347?

CVE-2025-12347 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

LOW

Improper Access Control (CWE-284)

2025-10-28 cna@vuldb.com

PHP Authentication Bypass File Upload Maxsite Cms

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Apr 29, 2026 - 02:34 vuln.today

DescriptionCVE.org

A flaw has been found in MaxSite CMS up to 109. This issue affects some unknown processing of the file application/maxsite/admin/plugins/editor_files/save-file-ajax.php. Executing manipulation of the argument file_path/content can lead to unrestricted upload. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

MaxSite CMS up to version 109 contains an improper access control vulnerability in the file editor plugin that allows authenticated remote attackers to upload arbitrary files by manipulating the file_path and content parameters in save-file-ajax.php. Publicly available exploit code exists for this vulnerability, and the vendor has not responded to early disclosure attempts, leaving affected installations unpatched.

Technical ContextAI

MaxSite CMS is a PHP-based content management system. The vulnerability exists in the admin plugin for the file editor component (application/maxsite/admin/plugins/editor_files/save-file-ajax.php), which processes file upload requests. The root cause is classified under CWE-284 (Improper Access Control), indicating insufficient validation or authorization checks on file operations. By manipulating the file_path and content parameters sent to this AJAX endpoint, attackers can bypass intended upload restrictions and write arbitrary files to the server filesystem. The vulnerability affects all versions up to and including version 109.

RemediationAI

No vendor-released patch identified at time of analysis, as the vendor has not responded to disclosure attempts. The primary remediation is to restrict access to the admin panel at the network level, limiting exposure of the save-file-ajax.php endpoint to trusted IP addresses or requiring VPN access. Additionally, enforce strong authentication mechanisms for admin accounts and implement Web Application Firewall (WAF) rules to block requests to application/maxsite/admin/plugins/editor_files/save-file-ajax.php that contain suspicious file_path or content parameters. Disable the file editor plugin entirely if not actively used. As a compensating control, monitor file system changes in the upload directories and implement file integrity monitoring to detect unauthorized file creation. Customers requiring this functionality should consider upgrading to alternative CMS platforms with active security maintenance, as MaxSite CMS has demonstrated insufficient vendor responsiveness to reported vulnerabilities.