ISP Billing Software vulnerabilities

A Cross-Site Scripting (XSS) vulnerability was identified in BichitroGan ISP Billing Software 2025.3.20 in the Pool List Interface (/?_route=pool/add). Input manipulation enables remote attack, and a public exploit is available. The vendor did not respond to the disclosure.

A Cross-Site Scripting (XSS) vulnerability was discovered in BichitroGan ISP Billing Software 2025.3.20 in the Profile Page Handler (/?_route=settings/users-view/). Input manipulation enables remote attack. The vendor did not respond to the disclosure.

A Cross-Site Scripting (XSS) vulnerability was identified in BichitroGan ISP Billing Software 2025.3.20 in the Customer Handler (/?_route=customers/edit/). Input manipulation leads to remote attack, and a public exploit is available. The vendor did not respond to the disclosure.