CVE-2017-14536
trixbox 2.8.0.4 has XSS via the PATH_INFO to /maint/index.php or /user/includes/language/langChooser.php.
Date published : 2018-02-15
http://www.securityfocus.com/bid/103009
TrixBox Multiple Cross Site Scripting Vulnerabilities [CVE-2017-14536]