Magnusbilling

2 CVEs product

Monthly

CVE-2025-2610 HIGH POC PATCH This Week

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling (Alarm Module modules) allows authenticated stored cross-site scripting. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP XSS Magnusbilling
NVD GitHub
CVSS 3.1
7.6
EPSS
2.3%
CVE-2025-2609 HIGH POC PATCH This Week

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP XSS Magnusbilling
NVD GitHub
CVSS 3.1
8.2
EPSS
5.5%
EPSS 2% CVSS 7.6
HIGH POC PATCH This Week

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling (Alarm Module modules) allows authenticated stored cross-site scripting. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP XSS Magnusbilling
NVD GitHub
EPSS 6% CVSS 8.2
HIGH POC PATCH This Week

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log. Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP XSS Magnusbilling
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy