Voltar

MagnusBilling Stored Cross-Site Scripting in Login Logs

março 21º 2025 PUBLISHED XSS RCE

Pontuação da CVSS

Severidade Alta

8.2

Descrição

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read" cross-site scripting This vulnerability is associated with program files protected/components/MagnusLog.Php.

This issue affects MagnusBilling: through 7.3.0.

Versões Afetadas

Fornecedor Produto Versão
MagnusSolution MagnusBilling 0