TI-2017-06422 CVE-2017-8930 · GHSA-425m-4v5p-2xchMultiple cross-site request forgery (CSRF) vulnerabilities in Simple Invoices…Priority LOW 39Multiple cross-site request forgery (CSRF) vulnerabilities in Simple Invoices 2013.1.beta.8 allow remote attackers to hijack the authentication of admins for requests that can (1) create new administrator user accounts a…CVSS 3.0HIGH 8.8· Network · No auth · User interaction · EPSS 0.00718 · Published 2017-05-14 · No fix listed CWE-352