Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2025-2610

MagnusBilling Stored Cross-Site Scripting in Alarm Module

Description

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling (Alarm Module modules) allows authenticated stored cross-site scripting. This vulnerability is associated with program files protected/components/MagnusLog.Php. This issue affects MagnusBilling: through 7.3.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MagnusSolution MagnusBilling

Default version status: affected

  • 0 to ≤ 7.3.0affected
pkg:github/magnussolution/magnusbilling7

References