CVE-2026-53648 | | | 2026-07-07 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.1, downloadable product files are stored using a deterministic fi… |
CVE-2026-53647 | | | 2026-07-07 | FOSSBilling is a free, open-source billing and client management system. In versions 0.5.3 through 0.7.2, the Guest `serviceapikey/get_info` API endpoint is ac… |
CVE-2026-53646 | | | 2026-07-06 | FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when a `ClientPasswordReset` record already exists fo… |
CVE-2026-53645 | | | 2026-07-06 | FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow a low-privileged staff account to grant arbitrary module… |
CVE-2026-53644 | | | 2026-07-06 | FOSSBilling is a free, open-source billing and client management system. Versions 0.5.3 through 0.7.2 allow authenticated clients to both read and reset API ke… |
CVE-2026-53643 | | | 2026-07-06 | FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow low-privileged staff accounts to perform unauthorized ac… |
CVE-2026-53642 | | | 2026-07-06 | FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when the "Require Email Confirmation" setting is enab… |
CVE-2026-53641 | | | 2026-07-06 | FOSSBilling is a free, open-source billing and client management system. Versions 0.6.0 through 0.7.2 have a stored cross-site scripting (XSS) vulnerability in… |
CVE-2026-53640 | | | 2026-07-06 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, low-privileged staff accounts may read sensitive data via admi… |
CVE-2026-43928 | | | 2026-07-06 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the PayPalEmail payment adapter accepts PayPal IPN callbacks a… |
CVE-2026-43927 | | | 2026-07-06 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, a race condition in the cart checkout flow allows an authentic… |
CVE-2026-43925 | | | 2026-07-06 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, an unauthenticated mass assignment vulnerability in the client… |
CVE-2026-43921 | | | 2026-07-06 | FOSSBilling is a free, open-source billing and client management system. Versions 0.6.10 through 0.7.2 have a PHP code injection vulnerability in FOSSBilling's… |
CVE-2026-43918 | | | 2026-07-06 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, when a client or staff/admin account is suspended or marked in… |
CVE-2026-42341 | | | 2026-07-06 | FOSSBilling is a free, open-source billing and client management system. Versions 0.6.0 through 0.7.2 have an unauthenticated payment bypass vulnerability in F… |
CVE-2026-42331 | | | 2026-07-06 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the Guest API invoice/update endpoint is missing an authorizat… |
CVE-2026-33734 | | | 2026-07-06 | FOSSBilling is a free, open-source billing and client management system. Versions 0.6.0 through 0.7.2 have a SQL injection vulnerability in the `Massmailer` mo… |
CVE-2026-43920 | | | 2026-06-26 | FOSSBilling is a free, open-source billing and client management system. In versions 0.5.4 through 0.7.2, the /run-patcher maintenance endpoint in FOSSBilling… |
CVE-2026-33543 | | | 2026-06-24 | FOSSBilling is a free, open-source billing and client management system. Versions 0.7.2 and prior expose a guest API endpoint, /api/guest/staff/create, intende… |
CVE-2026-27708 | | | 2026-06-24 | FOSSBilling is a free, open-source billing and client management system. In versions 0.7.2 and prior, the Servicecustom Client API's __call method accepts an o… |
CVE-2026-23513 | | | 2026-06-23 | FOSSBilling is a free, open-source billing and client management system. In versions 0.7.2 and prior, a query-construction flaw in client list endpoints allowe… |
CVE-2025-64105 | | | 2026-06-23 | FOSSBilling is a billing and client management system that automates invoicing, payments, and communication for online service businesses. Versions 0.6.21 thro… |
CVE-2026-28496 | | | 2026-06-23 | FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 have a Server-Side Template Injection (SSTI) vulnerability in… |
CVE-2026-27604 | | | 2026-06-23 | FOSSBilling is a free, open-source billing and client management system. Starting in version 0.5.4 and prior to version 0.8.0, an authorization bypass in the A… |
CVE-2026-43926 | | | 2026-06-04 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the password reset confirmation endpoint `/client/reset-passwo… |
CVE-2026-43924 | | | 2026-06-03 | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, the Redirect module does not validate the URL scheme of admini… |
CVE-2026-40495 | | | 2026-06-03 | FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 leak the exact system version through asset cache buster param… |
CVE-2023-4005 | Critical | 9.8 | 2023-07-31 | Insufficient Session Expiration in GitHub repository fossbilling/fossbilling prior to 0.5.5. |
CVE-2023-3568 | Medium | 6.3 | 2023-07-10 | Open Redirect in GitHub repository alextselegidis/easyappointments prior to 1.5.0.
|
CVE-2023-3521 | Medium | 6.1 | 2023-07-06 | Cross-site Scripting (XSS) - Reflected in GitHub repository fossbilling/fossbilling prior to 0.5.4. |
CVE-2023-3493 | High | 8.0 | 2023-06-30 | Improper Neutralization of Formula Elements in a CSV File in GitHub repository fossbilling/fossbilling prior to 0.5.3. |
CVE-2023-3491 | High | 8.8 | 2023-06-30 | Unrestricted Upload of File with Dangerous Type in GitHub repository fossbilling/fossbilling prior to 0.5.3. |
CVE-2023-3490 | Critical | 9.8 | 2023-06-30 | SQL Injection in GitHub repository fossbilling/fossbilling prior to 0.5.3. |
CVE-2023-3394 | Medium | 5.4 | 2023-06-23 | Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1. |
CVE-2023-3393 | High | 7.2 | 2023-06-23 | Code Injection in GitHub repository fossbilling/fossbilling prior to 0.5.1. |
CVE-2023-3230 | High | 7.5 | 2023-06-14 | Missing Authorization in GitHub repository fossbilling/fossbilling prior to 0.5.0. |
CVE-2023-3229 | Medium | 6.5 | 2023-06-14 | Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0. |
CVE-2023-3228 | Medium | 5.7 | 2023-06-14 | Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0. |
CVE-2023-3227 | Medium | 5.7 | 2023-06-14 | Insufficient Granularity of Access Control in GitHub repository fossbilling/fossbilling prior to 0.5.0. |