Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2026/02/21 7:29 p.m.2 views

CVE-2026-27504

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobilefront.php via the stationid query parameter. When an authenticated administrator views a crafted URL, the application embeds the unsanitized parameter value into a hidden input value field, allowi...

6.1CVSS5.4AI score0.00049EPSS
Exploits0References1
NVD
NVD
added 2026/02/20 5:25 p.m.3 views

CVE-2026-27504

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobilefront.php via the stationid query parameter. When an authenticated administrator views a crafted URL, the application embeds the unsanitized parameter value into a hidden input value field, allowi...

6.1CVSS0.00049EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/02/20 4:48 p.m.19 views

CVE-2026-27504 SVXportal <= 2.5 radiomobile_front.php stationid Reflected XSS

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobilefront.php via the stationid query parameter. When an authenticated administrator views a crafted URL, the application embeds the unsanitized parameter value into a hidden input value field, allowi...

6.1CVSS0.00049EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/20 4:48 p.m.3 views

CVE-2026-27504 SVXportal <= 2.5 radiomobile_front.php stationid Reflected XSS

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobilefront.php via the stationid query parameter. When an authenticated administrator views a crafted URL, the application embeds the unsanitized parameter value into a hidden input value field, allowi...

6.1CVSS5.4AI score0.00049EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/02/20 4:48 p.m.3 views

CVE-2026-27504

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobilefront.php via the stationid query parameter. When an authenticated administrator views a crafted URL, the application embeds the unsanitized parameter value into a hidden input value field, allowi...

6.1CVSS5.3AI score0.00049EPSS
Exploits0References3
CVE
CVE
added 2026/02/20 4:48 p.m.6 views

CVE-2026-27504

SVXportal

6.1CVSS5.4AI score0.00049EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.2 views

PT-2026-21273

SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobile front.php via the stationid query parameter. When an authenticated administrator views a crafted URL, the application embeds the unsanitized parameter value into a hidden input value field,...

5.1CVSS5.4AI score0.00049EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.3 views

SVXportal 安全漏洞

SVXportal is a portal website developed by Peter as an individual developer. Versions of SVXportal 2.5 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the unchecked stationid parameter in the radiomobilefront.php file, which could lead to reflection-type...

6.1CVSS5.7AI score0.00049EPSS
Exploits0References2
Rows per page
Query Builder