CVE-2026-50547

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Invoices::generatexml method appends a database-derived xmlid to the XMLconfigs helper directory and includes the resulting PHP path without validating the identifier...

CVE-2026-50547 InvoicePlane permits local file inclusion through the e-invoice XML configuration identifier

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Invoices::generatexml method appends a database-derived xmlid to the XMLconfigs helper directory and includes the resulting PHP path without validating the identifier...

EUVD-2026-87132

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Invoices::generatexml method appends a database-derived xmlid to the XMLconfigs helper directory and includes the resulting PHP path without validating the identifier...

CVE-2026-50547 InvoicePlane permits local file inclusion through the e-invoice XML configuration identifier

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Invoices::generatexml method appends a database-derived xmlid to the XMLconfigs helper directory and includes the resulting PHP path without validating the identifier...

CVE-2026-50547

The self-hosted open source application InvoicePlane (versions prior to 1.7.2 ) is vulnerable to Local File Inclusion (LFI) . The root cause is located in the Invoices::generate_xml() method, which appends a database-derived xml_id to the XMLconfigs helper directory and includes the resulting PHP...

CVE-2026-50547: Improper Limitation of a Pathname to a Restricted Directory

InvoicePlane is a self-hosted open source application for managing invoices, clients, and payments. Prior to 1.7.2, InvoicePlane's Invoices::generatexml method appends a database-derived xmlid to the XMLconfigs helper directory and includes the resulting PHP path without validating the identifier...

PT-2026-98880

Name of the Vulnerable Software and Affected Versions InvoicePlane versions prior to 1.7.2 Description The Invoices::generate xml function appends a database-derived xml id to the XMLconfigs helper directory and includes the resulting PHP path without proper validation of the identifier. A...