A reflected Cross-Site Scripting (XSS) vulnerability exists in SVX Portal version 2.7A. The flaw is triggered via the 'id' parameter in the Recivers.php script, allowing an attacker to inject malicious scripts that are reflected back to users. This vulnerability has a CVSS 3.1 base score of 6.1, indicating a medium severity level.