Solidinvoice

Solidinvoice

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2025-55579

Exploit
  • EPSS 0.03%
  • Veröffentlicht 29.08.2025 00:00:00
  • Zuletzt bearbeitet 09.09.2025 14:00:39

SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality. The vulnerability is fixed in version 2.3.8.

5.4

CVE-2025-55580

Exploit
  • EPSS 0.03%
  • Veröffentlicht 29.08.2025 00:00:00
  • Zuletzt bearbeitet 09.09.2025 14:00:05

SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in the Clients module. An authenticated attacker can inject JavaScript that executes in other users' browsers when the Clients page is viewed. The vulnerability is ...

5.4

CVE-2025-9171

Exploit
  • EPSS 0.04%
  • Veröffentlicht 19.08.2025 22:32:05
  • Zuletzt bearbeitet 21.08.2025 18:27:55

A security flaw has been discovered in SolidInvoice up to 2.4.0. The impacted element is an unknown function of the file /clients of the component Clients Module. Performing manipulation of the argument Name results in cross site scripting. The attac...

5.4

CVE-2025-9170

Exploit
  • EPSS 0.04%
  • Veröffentlicht 19.08.2025 22:15:28
  • Zuletzt bearbeitet 21.08.2025 18:28:05

A vulnerability was identified in SolidInvoice up to 2.4.0. The affected element is an unknown function of the file /tax/rates of the component Tax Rates Module. Such manipulation of the argument Name leads to cross site scripting. The attack can be ...

5.4

CVE-2025-9169

Exploit
  • EPSS 0.04%
  • Veröffentlicht 19.08.2025 21:32:06
  • Zuletzt bearbeitet 21.08.2025 18:28:21

A vulnerability was determined in SolidInvoice up to 2.4.0. Impacted is an unknown function of the file /quotes of the component Quote Module. This manipulation of the argument Name causes cross site scripting. Remote exploitation of the attack is po...

5.4

CVE-2025-9168

Exploit
  • EPSS 0.04%
  • Veröffentlicht 19.08.2025 21:15:30
  • Zuletzt bearbeitet 21.08.2025 18:37:56

A vulnerability was found in SolidInvoice up to 2.4.0. This issue affects some unknown processing of the file /invoice of the component Invoice Creation Module. The manipulation of the argument Client Name results in cross site scripting. The attack ...

5.4

CVE-2025-9167

Exploit
  • EPSS 0.04%
  • Veröffentlicht 19.08.2025 20:32:06
  • Zuletzt bearbeitet 21.08.2025 18:38:09

A vulnerability has been found in SolidInvoice up to 2.4.0. This vulnerability affects unknown code of the file /invoice/recurring of the component Recurring Invoice Module. The manipulation of the argument client name leads to cross site scripting. ...