CVE-2015-2781: Hotspot Express Hotex Billing Manager

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in cgi-bin/hotspotlogin.cgi in Hotspot Express hotEx Billing Manager 73 allows remote attackers to inject arbitrary web script or HTML via the reply parameter.

Affected products

• Hotspot Express Hotex Billing Manager: version 73 only

Published 2015-04-14. Last modified 2026-06-17.