CVE-2025-2609

HIGHNuclei

MagnusBilling Stored Cross-Site Scripting in Login Logs

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2025-2609 has a selected CVSS score of 8.2 (high); EIP currently links 1 Nuclei template.

Description

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read" cross-site scripting This vulnerability is associated with program files protected/components/MagnusLog.Php. This issue affects MagnusBilling: through 7.3.0.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Mar 21, 2025 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 25, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

MagnusBilling

Browse MagnusSolution / MagnusBilling

Default status: affected

CVE List, VulnCheckThrough 7.3.0affected

Nuclei templates

1
ProjectDiscoveryHIGHMagnusBilling Login Logs - Cross-Site ScriptingCVSS 8.2

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read" cross-site scripting This vulnerability is associated with program files protected/components/MagnusLog.Php.This issue affects MagnusBilling- through 7.3.0.

Impact

Unauthenticated attackers can inject malicious HTML and JavaScript into login logs that persist and execute when administrators view the log component, potentially leading to session hijacking and privilege escalation.

Remediation

Upgrade to MagnusBilling version 7.3.1 or later that properly sanitizes input in the login logging component.

WeaknessesCWE-79
AuthorsDhiyaneshDK
Template tagscvecve2025mbillingstoredxssauthenticatedvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
CPE: cpe:2.3:a:magnussolution:magnusbilling:*:*:*:*:*:*:*:*
Shodan: html:"MagnusBilling"
FOFA: body="MagnusBilling"
https://vulncheck.com/advisories/magnusbilling-logs-xss https://chocapikk.com/posts/2025/magnusbilling/ https://nvd.nist.gov/vuln/detail/CVE-2025-2609

Source: ProjectDiscovery

References

4