High severity7.6NVD Advisory· Published Mar 21, 2025· Updated Jun 17, 2026

CVE-2025-2610

Description

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling (Alarm Module modules) allows authenticated stored cross-site scripting. This vulnerability is associated with program files protected/components/MagnusLog.Php.

This issue affects MagnusBilling: through 7.3.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Magnussolution/MagnusBilling Alarm Modulellm-create
Range: <=7.3.0
Magnussolution/Magnusbillingllm-fuzzy2 versions
<=7.3.0+ 1 more
- (no CPE)range: <=7.3.0
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

github.com/magnussolution/magnusbilling7/commit/f0f083c76157e31149ae58342342fb1bf1629e22nvdPatch
chocapikk.com/posts/2025/magnusbilling/nvdExploitThird Party Advisory
vulncheck.com/advisories/magnusbilling-alarm-xssnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.494
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000