Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
SolidInvoice records in CISA KEVNo SolidInvoice vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 58
SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in the Clients module.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00267 · Published 2025-08-29 · No fix listed CWE-79
Priority MEDIUM 58
SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00268 · Published 2025-08-29 · No fix listed CWE-79
Priority MEDIUM 56
A security flaw has been discovered in SolidInvoice up to 2.4.0.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00305 · Published 2025-08-19 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability was identified in SolidInvoice up to 2.4.0.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00305 · Published 2025-08-19 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability was determined in SolidInvoice up to 2.4.0.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00305 · Published 2025-08-19 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability was found in SolidInvoice up to 2.4.0.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00305 · Published 2025-08-19 · No fix listed CWE-79
Priority MEDIUM 56
A vulnerability has been found in SolidInvoice up to 2.4.0.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00305 · Published 2025-08-19 · No fix listed CWE-79
THREATIST.IORead the docs