PatchTheCVE: telaxiushttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2017-14717: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter.https://patchthecve.com/cve/CVE-2017-14717.htmlhttps://patchthecve.com/cve/CVE-2017-14717.htmlWed, 17 Jun 2026 01:06:39 +0000MEDIUM 5.4: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter.CVE-2017-14716: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter.https://patchthecve.com/cve/CVE-2017-14716.htmlhttps://patchthecve.com/cve/CVE-2017-14716.htmlWed, 17 Jun 2026 01:06:39 +0000MEDIUM 5.4: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter.CVE-2017-14715: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter.https://patchthecve.com/cve/CVE-2017-14715.htmlhttps://patchthecve.com/cve/CVE-2017-14715.htmlWed, 17 Jun 2026 01:06:39 +0000MEDIUM 5.4: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter.CVE-2017-14714: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter.https://patchthecve.com/cve/CVE-2017-14714.htmlhttps://patchthecve.com/cve/CVE-2017-14714.htmlWed, 17 Jun 2026 01:06:39 +0000MEDIUM 5.4: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter.CVE-2017-14713: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter.https://patchthecve.com/cve/CVE-2017-14713.htmlhttps://patchthecve.com/cve/CVE-2017-14713.htmlWed, 17 Jun 2026 01:06:39 +0000MEDIUM 5.4: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter.CVE-2017-14712: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.https://patchthecve.com/cve/CVE-2017-14712.htmlhttps://patchthecve.com/cve/CVE-2017-14712.htmlWed, 17 Jun 2026 01:06:39 +0000MEDIUM 5.4: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.CVE-2017-8763: Cross-site scripting (XSS) vulnerability in modules/Base/Box/check_for_new_version.php in EPESI in Telaxus/EPEhttps://patchthecve.com/cve/CVE-2017-8763.htmlhttps://patchthecve.com/cve/CVE-2017-8763.htmlWed, 17 Jun 2026 01:26:55 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in modules/Base/Box/check_for_new_version.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URI that lacks the cid parameter.