Unknown · Svx Portal · CVE-2025-61532
**Name of the Vulnerable Software and Affected Versions**
SVX Portal version 2.7A
**Description**
A Cross Site Scripting issue exists in SVX Portal version 2.7A that allows for the execution of arbitrary code. The issue is located in the `last heard page.php` component and involves the `TG` parameter. Exploitation occurs through manipulation of the `TG` parameter.
**Recommendations**
Update to a newer version that contains a fix for this vulnerability.