Maxsite CMS v180 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the parameter ffiledescription at /admin/files.