Read the docs

sa2blv

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

sa2blv records in CISA KEV

No sa2blv vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Svxportal 5 records LOW Svx Portal 2 records MEDIUM

Records

7 records

TI-2026-21910 CVE-2026-27506 · GHSA-62hw-x3qq-c7vv

SVXportal <= 2.5 Profile Update Stored XSS

Priority LOW 23

SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow (user_settings.php submitting to admin/update_user.php).

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00198 Published 2026-02-20 No fix listed CWE-79
TI-2026-21909 CVE-2026-27505 · GHSA-87jc-9r3r-58w8

SVXportal <= 2.5 admin/user_action.php Stored XSS

Priority LOW 23

SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user registration workflow (index.php submitting to admin/user_action.php).

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00217 Published 2026-02-20 No fix listed CWE-79
TI-2026-21908 CVE-2026-27504 · GHSA-gfrr-w669-mfpw

SVXportal <= 2.5 radiomobile_front.php stationid Reflected XSS

Priority LOW 23

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobile_front.php via the stationid query parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00219 Published 2026-02-20 No fix listed CWE-79
TI-2026-21906 CVE-2026-27502 · GHSA-pg4q-7rh5-52c9

SVXportal <= 2.5 log.php Search Reflected XSS

Priority LOW 23

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00241 Published 2026-02-20 No fix listed CWE-79
TI-2026-21907 CVE-2026-27503 · GHSA-w246-2vcp-75v8

SVXportal <= 2.5 admin/log.php Search Reflected XSS

Priority LOW 22

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in admin/log.php via the search query parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00186 Published 2026-02-20 No fix listed CWE-79
Open these records in search →