XSS in Phoenix Bv Cms

CVE-2025-40727

A Reflected Cross Site Scripting (XSS) vulnerability was found in '/search' in Phoenix Site CMS from Phoenix, which allows remote attackers to execute arbitrary code via 's' GET parameter.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.007 (49.5th percentile) — read the EPSS interpretation.