CVE-2017-14536: Netfortris Trixbox

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

trixbox 2.8.0.4 has XSS via the PATH_INFO to /maint/index.php or /user/includes/language/langChooser.php.

Affected products

• Netfortris Trixbox: version 2.8.0.4 only

Published 2018-02-16. Last modified 2026-06-17.