ByteOS Network

NVD Vulnerability Details :

CVE-2025-63725

Analyzed

Source-cve@mitre.org

Published At-14 Nov, 2025 | 18:15

Updated At-12 Jan, 2026 | 17:43

Reflected Cross-Site Scripting (XSS) vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Type	Version	Base score	Base severity	Vector
Secondary	3.1	6.1	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Type: Secondary

Version: 3.1

Base score: 6.1

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE ID	Type	Source
CWE-79	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: CWE-79

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Hyperlink	Source	Resource
https://deepstrike.io/blog/reflected-xss-via-unescaped-attribute-context-in-svx-portal	cve@mitre.org	Exploit Third Party Advisory
https://deepstrike.io/blog/sql-injection-in-svx-portal-v-2-7A	cve@mitre.org	Not Applicable

Hyperlink: https://deepstrike.io/blog/reflected-xss-via-unescaped-attribute-context-in-svx-portal

Source: cve@mitre.org

Resource:

Exploit

Third Party Advisory

Hyperlink: https://deepstrike.io/blog/sql-injection-in-svx-portal-v-2-7A

Source: cve@mitre.org

Resource:

Not Applicable