CVE-2017-12798by Jeremyin Security Bulletinson Posted on August 10, 2017 Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php.