Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: MagnusSolution Clear all filters
TI-2025-32523 CVE-2025-52289 · GHSA-jgfv-5w6w-r347

A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered…

Priority HIGH 70

A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pe…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00473 Published 2025-07-31 No fix listed CWE-269
TI-2025-02276 CVE-2025-2609 · GHSA-fxw9-g6g5-mfqx

MagnusBilling Stored Cross-Site Scripting in Login Logs

Priority HIGH 69

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbil…

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01152 Published 2025-03-21 No fix listed CWE-79
TI-2025-02277 CVE-2025-2610 · GHSA-5fww-m73j-6p23

MagnusBilling Stored Cross-Site Scripting in Alarm Module

Priority HIGH 66

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling (Alarm Module modules) allows authenticated stored cross-site scripting.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.00963 Published 2025-03-21 No fix listed CWE-79