CVE-2025-40727: Phoenix Bv Phoenix CMS

Medium severity, CVSS 5.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A Reflected Cross Site Scripting (XSS) vulnerability was found in '/search' in Phoenix Site CMS from Phoenix, which allows remote attackers to execute arbitrary code via 's' GET parameter.

Affected products

Published 2025-06-16. Last modified 2026-06-17.