CVE-2026-24746

CVE-2026-24746 is a Stored Cross-Site Scripting vulnerability in InvoicePlane 1.7.0 within the Edit Quotes function. Exploitation requires administrator privileges and user interaction; the CVSSv3.1 base score is 5.7 (Medium) with PR:H and UI:R, indicating impact to integrity and limited confiden...