critical9.8
CVE-2026-25200
A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account ta…
Impact
A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue affects MagicINFO 9 Server: less than 21.1090.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Magicinfo 9 Server | before 21.1090.1 |