CVE-2025-2610: Magnussolution Magnusbilling

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

Improper neutralization of input during web page generation vulnerability in MagnusSolution MagnusBilling (Alarm Module modules) allows authenticated stored cross-site scripting. This vulnerability is associated with program files protected/components/MagnusLog.Php. This issue affects MagnusBilling: through 7.3.0.

Affected products

• Magnussolution Magnusbilling: up to and including 7.3.0

Published 2025-03-21. Last modified 2026-08-28.