Read the docs

Invoice Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Invoice Project records in CISA KEV

No Invoice Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Invoice 2 records LOW

Records

2 records

TI-2015-03680 CVE-2015-4382 · GHSA-qc5w-pjxj-hxgf

Multiple cross-site request forgery (CSRF) vulnerabilities in the Invoice module 6.x-1.x…

Priority LOW 31

Multiple cross-site request forgery (CSRF) vulnerabilities in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allow remote attackers to hijack the authentication of arbitrary users for req…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00644 Published 2015-06-15 No fix listed CWE-352
TI-2015-03679 CVE-2015-4381 · GHSA-9qp6-gqfr-4j3m

Cross-site scripting (XSS) vulnerability in the Invoice module 6.x-1.x before 6.x-1.2 and…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote authenticated users with the "Administer own invoices" permission to inject arbitr…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00947 Published 2015-06-15 No fix listed CWE-79
Open these records in search →