CVE-2025-2610
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Mar 21, 2025
Updated: Apr 1, 2025
CWE ID 79
Summary
CVE-2025-2610 is a stored cross-site scripting (XSS) vulnerability affecting the Alarm Module in MagnusSolution's MagnusBilling through version 7.3.0. This issue arises due to improper neutralization of user input during web page generation, allowing authenticated attackers to inject malicious scripts into MagnusLog.Php files. Successful exploitation could lead to unauthorized access to user information or the ability to carry out further attacks. Users are strongly urged to update to a patched version as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.