Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.2	EPSS 1.2%	CVE-2025-2609MagnusBilling · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High8.2EPSS 1.2%2025-03-21CVE Database V5CVE-2025-2609 Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read" cross-site scripting This vulnerability is associated with program files protected/components/MagnusLog.Php. This issue affects MagnusBilling: through 7.3.0. EPSS 1.2%Vulnerability MagnusSolution #cwe-79	CVE Database V5	2025-03-21
High	7.6	EPSS 1.0%	CVE-2025-2610MagnusBilling · Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') High7.6EPSS 1.0%2025-03-21CVE Database V5CVE-2025-2610 Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling (Alarm Module modules) allows authenticated stored cross-site scripting. This vulnerability is associated with program files protected/components/MagnusLog.Php. This issue affects MagnusBilling: through 7.3.0. EPSS 1.0%Vulnerability MagnusSolution #cwe-79	CVE Database V5	2025-03-21

Showing 1–2 of 2 results