CVE-2017-6479: Fenix Hosting Fenix-Open-Source

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

FenixHosting/fenix-open-source before 2017-03-04 is vulnerable to a reflected XSS in forums/search.php (search-by-topic parameter).

Affected products

• Fenix Hosting Fenix-Open-Source: up to and including 2017-02-21

Published 2017-03-05. Last modified 2026-06-17.