CVE-2025-61532

MEDIUM

SVX Portal 2.7A - Cross-Site Scripting via TG Parameter on last_heard_page.php

Title source: llm

Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on last_heard_page.php component

Core 3

Core References

Various Sources

Various Sources

Release Notes

CVSS v3 6.1

EPSS 0.0026

EPSS Percentile 17.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-79

Status published

Published Oct 09, 2025

Tracked Since Feb 18, 2026