Vulnerabilities

Filters

2 selected

7 records

Sort

Vendor: SolidInvoice Component: Solidinvoice Clear all filters

TI-2025-35046 CVE-2025-55580 · GHSA-f9jq-jw9w-3752

SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in…

MEDIUM 58

SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in the Clients module.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00267 Published 2025-08-29 No fix listed CWE-79

TI-2025-35045 CVE-2025-55579 · GHSA-ff6v-2cx8-mf3h

SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in…

MEDIUM 58

SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00268 Published 2025-08-29 No fix listed CWE-79

TI-2025-08409 CVE-2025-9171 · GHSA-9xqq-4chh-p6q2

SolidInvoice Clients clients cross site scripting

MEDIUM 56

A security flaw has been discovered in SolidInvoice up to 2.4.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00305 Published 2025-08-19 No fix listed CWE-79

TI-2025-08408 CVE-2025-9170 · GHSA-4jg7-26wv-9mgv

SolidInvoice Tax Rates rates cross site scripting

MEDIUM 56

A vulnerability was identified in SolidInvoice up to 2.4.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00305 Published 2025-08-19 No fix listed CWE-79

TI-2025-08407 CVE-2025-9169 · GHSA-48jf-v4rx-6m25

SolidInvoice Quote quotes cross site scripting

MEDIUM 56

A vulnerability was determined in SolidInvoice up to 2.4.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00305 Published 2025-08-19 No fix listed CWE-79

TI-2025-08406 CVE-2025-9168 · GHSA-892j-v748-7fwj

SolidInvoice Invoice Creation invoice cross site scripting

MEDIUM 56

A vulnerability was found in SolidInvoice up to 2.4.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00305 Published 2025-08-19 No fix listed CWE-79

TI-2025-08405 CVE-2025-9167 · GHSA-37cw-49fx-hw6w

SolidInvoice Recurring Invoice recurring cross site scripting

MEDIUM 56

A vulnerability has been found in SolidInvoice up to 2.4.0.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00305 Published 2025-08-19 No fix listed CWE-79