Description
MagnusBilling登录日志存在存储型XSS，攻击者对管理员进行钓鱼攻击。
MagnusBilling登录日志存在存储型XSS(CVE-2025-2609)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-2609
https://vulncheck.com/advisories/magnusbilling-logs-xss
https://chocapikk.com/posts/2025/magnusbilling/
https://cve.imfht.com/detail/CVE-2025-2609
https://ddpoc.com/DVB-2025-10060.html
https://github.com/advisories/GHSA-fxw9-g6g5-mfqx
https://osv.dev/vulnerability/CVE-2025-2609
https://vuldb.com/vuln/300632
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2025-2609