7 matches found
MagnusBilling Login Logs - Cross-Site Scripting
Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read" cross-site scripting This vulnerability is...
CVE-2025-2609
Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read" cross-site scripting This vulnerability is...
CVE-2025-2609
creationtimestamp| type| source ---|---|--- 2025-03-21 23:19:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8457 2025-03-22 00:48:22+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114203328650631535 2025-03-22 02:00:36+00:00| seen|...
CVE-2025-2609
Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read" cross-site scripting This vulnerability is...
CVE-2025-2609 MagnusBilling Stored Cross-Site Scripting in Login Logs
Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read" cross-site scripting This vulnerability is...
CVE-2025-2609 MagnusBilling Stored Cross-Site Scripting in Login Logs
Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read" cross-site scripting This vulnerability is...
CVE-2025-2609
MagnusSolution MagnusBilling versions through 7.3.0 are vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. The flaw exists in the login logging component, specifically within the file protected/components/MagnusLog.Php, due to improper neutralization of input during web page generat...