CVE-2026-25200

Summary: MagicInfo9 Server contains a vulnerability that allows authorized users to upload HTML files without authentication, leading to Stored XSS and potential account takeover. Affected versions: MagicINFO 9 Server