Vulnerabilities in InvoicePlane
27 resultsCVE-2026-25596MEDIUMInvoicePlane has Stored XSS via Product Unit Name in Invoice Item ListEPSS 0.2%CVE-2026-25595MEDIUMInvoicePlane has Stored XSS via Invoice Number in Invoice View and DashboardEPSS 0.2%CVE-2026-85293MEDIUMInvoicePlane: Stored Cross-Site Scripting (XSS) via Client Email in Invoice and Quote Mailer FormsEPSS 0.2%CVE-2026-26281MEDIUMInvoicePlane has Stored Cross-Site Scripting (XSS) Issue in Sumex Invoice ViewEPSS 0.2%CVE-2026-26270MEDIUMInvoicePlane has Stored Cross-Site Scripting Issue in Identifier FormattingEPSS 0.2%CVE-2026-85289MEDIUMInvoicePlane: Missing CSRF Token Validation on Multiple Delete EndpointsEPSS 0.2%CVE-2026-85274MEDIUMInvoicePlane: Recurring Invoice State Change via GET Request Without CSRF ProtectionEPSS 0.2%