VendorsMagnusSolutionmagnusbillingall versions
Vulnerabilities

MagnusSolution MagnusBilling

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2023-30258
Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request.
Published 2023-06-23 · Modified
9.81 PoCEPSS 0.943
CVE-2025-2609
MagnusBilling Stored Cross-Site Scripting in Login Logs
Published 2025-03-21 · Modified
8.2EPSS 0.011
CVE-2025-52289
A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pending" to "active" without requiring administrator approval.
Published 2025-07-31 · Analyzed
8.0EPSS 0.004
CVE-2025-2610
MagnusBilling Stored Cross-Site Scripting in Alarm Module
Published 2025-03-21 · Modified
7.6EPSS 0.009