PT-2026-98879

Name of the Vulnerable Software and Affected Versions InvoicePlane versions prior to 1.7.2 Description InvoicePlane exposes the delete and delete invoice tax functions within the Invoices module as state-changing routes that do not require a POST request or CSRF Cross-Site Request Forgery token...