Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.2	EPSS 1.2%	CVE-2025-2609MagnusSolution MagnusBilling · XSS or 'Cross-site Scripting' High8.2EPSS 1.2%2025-03-21CVE Database V5CVE-2025-2609 Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read" cross-site scripting This vulnerability is associated with program files protected/components/MagnusLog.Php. This issue affects MagnusBilling: through 7.3.0. EPSS 1.2%Vulnerability CWE-79	CVE Database V5	2025-03-21
High	7.6	EPSS 1.0%	CVE-2025-2610MagnusSolution MagnusBilling · XSS or 'Cross-site Scripting' High7.6EPSS 1.0%2025-03-21CVE Database V5CVE-2025-2610 Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling (Alarm Module modules) allows authenticated stored cross-site scripting. This vulnerability is associated with program files protected/components/MagnusLog.Php. This issue affects MagnusBilling: through 7.3.0. EPSS 1.0%Vulnerability CWE-79	CVE Database V5	2025-03-21

Page 1 of 1