high7.6
CVE-2025-2610
Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling (Alarm Module modules) allows authenticated stored cr…
Impact
Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling (Alarm Module modules) allows authenticated stored cross-site scripting. This vulnerability is associated with program files protected/components/MagnusLog.Php. This issue affects MagnusBilling: through 7.3.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Magnussolution | Magnusbilling | through 7.3.0 |