MagnusBilling Stored Cross-Site Scripting in Login Logs
58Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actcvss 8.2epss 1.1%
da publicação à arma
Publicada no NVD21 de mar.
VulnCheck21 de mar.
probabilidade de exploração
1.1%top 38% das CVEs
exploração observada
simVulnCheck
Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling login logging allows unauthenticated users to store HTML content in the viewable log component accessible at /mbilling/index.php/logUsers/read" cross-site scripting This vulnerability is associated with program files protected/components/MagnusLog.Php.
This issue affects MagnusBilling: through 7.3.0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
Produtos afetados
MagnusSolution · MagnusBilling