CVE-2026-25200
A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issu…
Published: 2026-02-02 · CVSS: 9.8 · CVSS 3.1
A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue affects MagicINFO 9 Server: less than 21.1090.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7