Read the docs

MagnusSolution

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

MagnusSolution records in CISA KEV

No MagnusSolution vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Magnusbilling 4 records CRITICAL

Records

4 records

TI-2025-32523 CVE-2025-52289 · GHSA-jgfv-5w6w-r347

A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered…

Priority HIGH 70

A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pe…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00473 Published 2025-07-31 No fix listed CWE-269
TI-2025-02276 CVE-2025-2609 · GHSA-fxw9-g6g5-mfqx

MagnusBilling Stored Cross-Site Scripting in Login Logs

Priority HIGH 69

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbil…

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01152 Published 2025-03-21 No fix listed CWE-79
TI-2025-02277 CVE-2025-2610 · GHSA-5fww-m73j-6p23

MagnusBilling Stored Cross-Site Scripting in Alarm Module

Priority HIGH 66

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling (Alarm Module modules) allows authenticated stored cross-site scripting.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00963 Published 2025-03-21 No fix listed CWE-79
Open these records in search →