PT-2025-46988 · Unknown · Svx Portal
CVE-2025-63725
·
Published
2025-11-14
·
Updated
2025-11-14
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
SVX Portal version 2.7A
Description
A Reflected Cross-Site Scripting (XSS) issue exists in SVX Portal version 2.7A. The issue is located in the
Recivers.php file, specifically through the id parameter. An attacker can exploit this to inject malicious scripts. The id parameter is vulnerable to manipulation.Recommendations
Apply input validation and sanitization to the
id parameter in the Recivers.php file.Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Svx Portal