Vulnerabilities in InvoicePlane

11 results

CVE-2026-23491CRITICALInvoicePlane has Unauthenticated Path Traversal in Guest ControllerEPSS 1.1%CVE-2026-25548CRITICALInvoicePlane Vulnerable to Remote Code Execution via Local File Inclusion and Log PoisoningEPSS 0.8%CVE-2026-24746MEDIUMInvoicePlane has a Stored Cross-Site Scripting (XSS) issueEPSS 0.3%CVE-2026-24743MEDIUMInvoicePlane has a Stored Cross-Site Scripting (XSS) issueEPSS 0.2%CVE-2026-24745MEDIUMInvoicePlane has a Stored Cross-Site Scripting (XSS) issueEPSS 0.2%CVE-2026-24744MEDIUMInvoicePlane has a Stored Cross-Site Scripting (XSS) issueEPSS 0.2%CVE-2026-25594MEDIUMInvoicePlane has Stored XSS via Family Name in Product FormEPSS 0.2%CVE-2026-25595MEDIUMInvoicePlane has Stored XSS via Invoice Number in Invoice View and DashboardEPSS 0.2%CVE-2026-25596MEDIUMInvoicePlane has Stored XSS via Product Unit Name in Invoice Item ListEPSS 0.2%CVE-2026-26281MEDIUMInvoicePlane has Stored Cross-Site Scripting (XSS) Issue in Sumex Invoice ViewEPSS 0.2%CVE-2026-26270MEDIUMInvoicePlane has Stored Cross-Site Scripting Issue in Identifier FormattingEPSS 0.2%