Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2025-2609

MagnusBilling Stored Cross-Site Scripting in Login Logs

Description

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read" cross-site scripting This vulnerability is associated with program files protected/components/MagnusLog.Php. This issue affects MagnusBilling: through 7.3.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MagnusSolution MagnusBilling

Default version status: affected

  • 0 to ≤ 7.3.0affected
pkg:github/magnussolution/magnusbilling7

References