Solidinvoice

13 CVEs across 1 Solidinvoice products. Browse Solidinvoice vulnerabilities, severities, and proof-of-concept exploits.

Solidinvoice products with known CVEs

ProductCVEs
Solidinvoice13
Solidinvoice CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-61688Medium6.52026-09-04SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, an authenticated user can view the API request history of any other user's API token…
CVE-2026-61686High7.52026-09-04SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the `DataGrid` LiveComponent deserializes a `context` prop value using PHP's `unseri…
CVE-2026-61614Medium5.92026-09-04SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, the REST API authenticator accepts bearer tokens via a `?token=` URL query parameter…
CVE-2026-61608Medium6.82026-09-04SolidInvoice is an open-source invoicing platform. Prior to version 3.0.1, `UserInvitation` entities have no expiry timestamp. Invitation links mailed to users…
CVE-2026-46622High8.12026-06-11SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, API tokens used to authenticate all REST API requests are stored as plaintext strin…
CVE-2026-46489High8.12026-06-11SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, the company logo upload feature accepts any file type without validation. An authen…
CVE-2025-55580Medium5.42025-08-29SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in the Clients module. An authenticated attacker can inject JavaScript th…
CVE-2025-55579Medium5.42025-08-29SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality. The vulnerability is fixed in version 2.3…
CVE-2025-9171Low3.52025-08-19A security flaw has been discovered in SolidInvoice up to 2.4.0. The impacted element is an unknown function of the file /clients of the component Clients Modu…
CVE-2025-9170Low3.52025-08-19A vulnerability was identified in SolidInvoice up to 2.4.0. The affected element is an unknown function of the file /tax/rates of the component Tax Rates Modul…
CVE-2025-9169Low3.52025-08-19A vulnerability was determined in SolidInvoice up to 2.4.0. Impacted is an unknown function of the file /quotes of the component Quote Module. This manipulatio…
CVE-2025-9168Low3.52025-08-19A vulnerability was found in SolidInvoice up to 2.4.0. This issue affects some unknown processing of the file /invoice of the component Invoice Creation Module…
CVE-2025-9167Low3.52025-08-19A vulnerability has been found in SolidInvoice up to 2.4.0. This vulnerability affects unknown code of the file /invoice/recurring of the component Recurring I…