Solidinvoice

7 CVEs across 1 Solidinvoice products. Browse Solidinvoice vulnerabilities, severities, and proof-of-concept exploits.

Solidinvoice products with known CVEs

ProductCVEs
Solidinvoice9
Solidinvoice CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-46622High8.12026-06-11SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, API tokens used to authenticate all REST API requests are stored as plaintext strin…
CVE-2026-46489High8.12026-06-11SolidInvoice is an open-source invoicing platform. Prior to version 2.3.17, the company logo upload feature accepts any file type without validation. An authen…
CVE-2025-55580Medium5.42025-08-29SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in the Clients module. An authenticated attacker can inject JavaScript th…
CVE-2025-55579Medium5.42025-08-29SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality. The vulnerability is fixed in version 2.3…
CVE-2025-9171Low3.52025-08-19A security flaw has been discovered in SolidInvoice up to 2.4.0. The impacted element is an unknown function of the file /clients of the component Clients Modu…
CVE-2025-9170Low3.52025-08-19A vulnerability was identified in SolidInvoice up to 2.4.0. The affected element is an unknown function of the file /tax/rates of the component Tax Rates Modul…
CVE-2025-9169Low3.52025-08-19A vulnerability was determined in SolidInvoice up to 2.4.0. Impacted is an unknown function of the file /quotes of the component Quote Module. This manipulatio…
CVE-2025-9168Low3.52025-08-19A vulnerability was found in SolidInvoice up to 2.4.0. This issue affects some unknown processing of the file /invoice of the component Invoice Creation Module…
CVE-2025-9167Low3.52025-08-19A vulnerability has been found in SolidInvoice up to 2.4.0. This vulnerability affects unknown code of the file /invoice/recurring of the component Recurring I…