CVE-2026-25594

CVE-2026-25594 — Stored XSS via Family Name in InvoicePlane 1.7.0 Vulnerability: Stored Cross-Site Scripting XSS via Family Name field Product: InvoicePlane Affected Version: 1.7.0 and likely prior versions Severity: Medium CVSS 3.1 Score: 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CWE:...