Security Advisory

CVE-2025-40727

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-06-16 08:20:30

Last updated 2025-06-16 17:08:35

Assigner INCIBE

CVSS score 5.1

State PUBLISHED

Description

A Reflected Cross Site Scripting (XSS) vulnerability was found in '/search' in Phoenix Site CMS from Phoenix, which allows remote attackers to execute arbitrary code via 's' GET parameter.

← Browse all CVEs View on cve.org ↗