CVE-2026-25200 - MagicInfo9 Server Stored XSS

CVE ID : CVE-2026-25200 Published : Feb. 2, 2026, 5:16 a.m. | 52 minutes ago Description : A vulnerability in MagicInfo9 Server allows authorized users to upload HTML files without authentication, leading to Stored XSS, which can result in account takeover This issue affects MagicINFO 9 Server: less than 21.1090.1. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...