Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: sa2blv Component: Svxportal Clear all filters
TI-2026-21910 CVE-2026-27506 · GHSA-62hw-x3qq-c7vv

SVXportal <= 2.5 Profile Update Stored XSS

Priority LOW 23

SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow (user_settings.php submitting to admin/update_user.php).

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00198 Published 2026-02-20 No fix listed CWE-79
TI-2026-21909 CVE-2026-27505 · GHSA-87jc-9r3r-58w8

SVXportal <= 2.5 admin/user_action.php Stored XSS

Priority LOW 23

SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user registration workflow (index.php submitting to admin/user_action.php).

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00217 Published 2026-02-20 No fix listed CWE-79
TI-2026-21908 CVE-2026-27504 · GHSA-gfrr-w669-mfpw

SVXportal <= 2.5 radiomobile_front.php stationid Reflected XSS

Priority LOW 23

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobile_front.php via the stationid query parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00219 Published 2026-02-20 No fix listed CWE-79
TI-2026-21907 CVE-2026-27503 · GHSA-w246-2vcp-75v8

SVXportal <= 2.5 admin/log.php Search Reflected XSS

Priority LOW 22

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in admin/log.php via the search query parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00186 Published 2026-02-20 No fix listed CWE-79
TI-2026-21906 CVE-2026-27502 · GHSA-pg4q-7rh5-52c9

SVXportal <= 2.5 log.php Search Reflected XSS

Priority LOW 23

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query parameter.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00241 Published 2026-02-20 No fix listed CWE-79