Home

Description

Cross Site Scripting vulnerability in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code

PUBLISHED Reserved 2026-03-09 | Published 2026-04-24 | Updated 2026-04-24 | Assigner mitre

References

github.com/...XSS) Vulnerability/admin and client interfaces exploit

hostbillapp.com/changelog

hostbillapp.com/release-notes/11-27-2025.html

blog.hostbillapp.com/2025/12/03/hostbill-security-advisory/

hostbillapp.com/responsible-disclosure

hostbillapp.com/release-notes/12-01-2025.html

github.com/...XSS) Vulnerability/admin and client interfaces

cve.org (CVE-2026-31050)

nvd.nist.gov (CVE-2026-31050)

Download JSON