CVE-2026-70553 | MaxSite CMS up to 109.5 Install Endpoint database.php db_dbprefix injection

August 4, 2026 Yanac

A vulnerability described as critical has been identified in MaxSite CMS up to 109.5. Affected by this issue is some unknown functionality of the file application/config/database.php of the component Install Endpoint. Executing a manipulation of the argument db_dbprefix can lead to injection.

This vulnerability is handled as CVE-2026-70553. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More