Lucene search
K

61 matches found

Vulnrichment
Vulnrichment
added 2025/08/19 9:32 p.m.3 views

CVE-2025-9169 SolidInvoice Quote quotes cross site scripting

A vulnerability was determined in SolidInvoice up to 2.4.0. Impacted is an unknown function of the file /quotes of the component Quote Module. This manipulation of the argument Name causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been publicly disclosed...

5.1CVSS6.4AI score0.00078EPSS
Exploits1References5
OSV
OSV
added 2025/08/19 9:15 p.m.1 views

CVE-2025-9168

A vulnerability was found in SolidInvoice up to 2.4.0. This issue affects some unknown processing of the file /invoice of the component Invoice Creation Module. The manipulation of the argument Client Name results in cross site scripting. The attack may be launched remotely. The exploit has been...

5.4CVSS4AI score
Exploits0References5
NVD
NVD
added 2025/08/19 9:15 p.m.5 views

CVE-2025-9168

A vulnerability was found in SolidInvoice up to 2.4.0. This issue affects some unknown processing of the file /invoice of the component Invoice Creation Module. The manipulation of the argument Client Name results in cross site scripting. The attack may be launched remotely. The exploit has been...

5.4CVSS0.00078EPSS
Exploits1References5
NVD
NVD
added 2025/08/19 9:15 p.m.8 views

CVE-2025-9167

A vulnerability has been found in SolidInvoice up to 2.4.0. This vulnerability affects unknown code of the file /invoice/recurring of the component Recurring Invoice Module. The manipulation of the argument client name leads to cross site scripting. The attack may be initiated remotely. The explo...

5.4CVSS0.00078EPSS
Exploits1References5
OSV
OSV
added 2025/08/19 9:15 p.m.2 views

CVE-2025-9167

A vulnerability has been found in SolidInvoice up to 2.4.0. This vulnerability affects unknown code of the file /invoice/recurring of the component Recurring Invoice Module. The manipulation of the argument client name leads to cross site scripting. The attack may be initiated remotely. The explo...

5.4CVSS3.9AI score
Exploits0References5
Cvelist
Cvelist
added 2025/08/19 9:2 p.m.9 views

CVE-2025-9168 SolidInvoice Invoice Creation invoice cross site scripting

A vulnerability was found in SolidInvoice up to 2.4.0. This issue affects some unknown processing of the file /invoice of the component Invoice Creation Module. The manipulation of the argument Client Name results in cross site scripting. The attack may be launched remotely. The exploit has been...

5.1CVSS0.00078EPSS
Exploits1References5
CVE
CVE
added 2025/08/19 9:2 p.m.15 views

CVE-2025-9168

CVE-2025-9168 affects SolidInvoice up to version 2.4.0 in the Invoice Creation Module. The issue arises from improper processing of the /invoice file, where manipulating the Client Name parameter triggers a stored XSS vulnerability. The attack can be launched remotely, and the exploit has been ma...

5.4CVSS6.3AI score0.00078EPSS
Exploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/19 9:2 p.m.3 views

CVE-2025-9168 SolidInvoice Invoice Creation invoice cross site scripting

A vulnerability was found in SolidInvoice up to 2.4.0. This issue affects some unknown processing of the file /invoice of the component Invoice Creation Module. The manipulation of the argument Client Name results in cross site scripting. The attack may be launched remotely. The exploit has been...

5.1CVSS6.3AI score0.00078EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/08/19 8:32 p.m.3 views

CVE-2025-9167 SolidInvoice Recurring Invoice recurring cross site scripting

A vulnerability has been found in SolidInvoice up to 2.4.0. This vulnerability affects unknown code of the file /invoice/recurring of the component Recurring Invoice Module. The manipulation of the argument client name leads to cross site scripting. The attack may be initiated remotely. The explo...

5.1CVSS6.4AI score0.00078EPSS
Exploits1References5
CVE
CVE
added 2025/08/19 8:32 p.m.16 views

CVE-2025-9167

CVE-2025-9167 concerns SolidInvoice versions up to 2.4.0, affecting the Recurring Invoice Module’s /invoice/recurring code. The vulnerability is a stored/reflected-like cross-site scripting issue caused by manipulation of the client name argument, leading to script injection with potential remote...

5.4CVSS6.4AI score0.00078EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/08/19 8:32 p.m.9 views

CVE-2025-9167 SolidInvoice Recurring Invoice recurring cross site scripting

A vulnerability has been found in SolidInvoice up to 2.4.0. This vulnerability affects unknown code of the file /invoice/recurring of the component Recurring Invoice Module. The manipulation of the argument client name leads to cross site scripting. The attack may be initiated remotely. The explo...

5.1CVSS0.00078EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/08/19 12:0 a.m.4 views

PT-2025-33883

Name of the Vulnerable Software and Affected Versions: SolidInvoice versions prior to 2.4.1 Description: A security flaw has been discovered in SolidInvoice. The impacted element is an unknown function within the /clients file of the Clients Module. Manipulation of the Name argument results in...

5.4CVSS3.7AI score0.00078EPSS
Exploits1References11
Positive Technologies
Positive Technologies
added 2025/08/19 12:0 a.m.4 views

PT-2025-33880 · Unknown · Solidinvoice

Name of the Vulnerable Software and Affected Versions: SolidInvoice versions prior to 2.4.1 Description: A cross-site scripting issue exists in SolidInvoice. The vulnerability affects an unknown function within the /quotes file of the Quote Module. Manipulation of the Name argument can lead to...

5.4CVSS3.7AI score0.00078EPSS
Exploits1References10
Positive Technologies
Positive Technologies
added 2025/08/19 12:0 a.m.8 views

PT-2025-33879 · Unknown · Solidinvoice

Name of the Vulnerable Software and Affected Versions: SolidInvoice versions prior to 2.4.1 Description: A vulnerability exists in SolidInvoice affecting the Invoice Creation Module. The issue involves an unknown processing of the /invoice file. Manipulation of the Client Name argument results in...

5.4CVSS6.4AI score0.00078EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/08/19 12:0 a.m.2 views

SolidInvoice 代码注入漏洞

SolidInvoice is an invoice solution application from SolidInvoice open source. A code injection vulnerability exists in SolidInvoice version 2.4.0 and earlier, which stems from the incorrect manipulation of the parameter Name in the file /tax/rates in the component Tax Rates Module, resulting in ...

5.4CVSS6.6AI score0.00078EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/08/19 12:0 a.m.5 views

PT-2025-33882 · Unknown · Solidinvoice

Name of the Vulnerable Software and Affected Versions: SolidInvoice versions prior to 2.4.1 Description: A vulnerability exists in SolidInvoice that allows for cross site scripting. The issue is located in an unknown function within the /tax/rates file of the Tax Rates Module. Manipulation of the...

5.4CVSS6.6AI score0.00078EPSS
Exploits1References9
Positive Technologies
Positive Technologies
added 2025/08/19 12:0 a.m.7 views

PT-2025-33865 · Unknown · Solidinvoice

Name of the Vulnerable Software and Affected Versions: SolidInvoice versions prior to 2.4.1 Description: A vulnerability exists in SolidInvoice that allows for cross site scripting. The issue affects unknown code within the /invoice/recurring file of the Recurring Invoice Module. Manipulation of...

5.4CVSS6.7AI score0.00078EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/08/19 12:0 a.m.2 views

SolidInvoice 代码注入漏洞

SolidInvoice is an invoice solution application from SolidInvoice open source. A code injection vulnerability exists in SolidInvoice version 2.4.0 and earlier, which stems from a cross-site scripting attack due to the incorrect manipulation of the parameter client name in the file...

5.4CVSS6.6AI score0.00078EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/08/19 12:0 a.m.2 views

SolidInvoice 代码注入漏洞

SolidInvoice is an invoice solution application from SolidInvoice open source. A code injection vulnerability exists in SolidInvoice version 2.4.0 and earlier, which stems from the incorrect manipulation of the parameter Name by file/quotes in the component Quote Module, resulting in a cross-site...

5.4CVSS6.7AI score0.00078EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/08/19 12:0 a.m.0 views

SolidInvoice 代码注入漏洞

SolidInvoice is an invoice solution application from SolidInvoice open source. A code injection vulnerability exists in SolidInvoice version 2.4.0 and earlier, which stems from the incorrect manipulation of the parameter Client Name by file/invoice in the component Invoice Creation Module, leadin...

5.4CVSS6.6AI score0.00078EPSS
Exploits1References7
Rows per page
Query Builder