Vulnerabilidades em InvoicePlane
11 resultadosAnálise Vexday
InvoicePlane apresenta 11 vulnerabilidades catalogadas, das quais 2 são críticas, predominantemente de injeção XSS (CWE-79); nenhuma está sob exploração ativa conhecida e não há registros recentes de novos CVEs, indicando risco contido mas presente. A fraqueza em validação de entrada persiste como vetor principal, exigindo atenção em atualizações de segurança da aplicação.
CVE-2026-23491CRITICALInvoicePlane has Unauthenticated Path Traversal in Guest ControllerEPSS 4.1%CVE-2026-25548CRITICALInvoicePlane Vulnerable to Remote Code Execution via Local File Inclusion and Log PoisoningEPSS 0.8%CVE-2026-24746MEDIUMInvoicePlane has a Stored Cross-Site Scripting (XSS) issueEPSS 0.3%CVE-2026-24743MEDIUMInvoicePlane has a Stored Cross-Site Scripting (XSS) issueEPSS 0.2%CVE-2026-24745MEDIUMInvoicePlane has a Stored Cross-Site Scripting (XSS) issueEPSS 0.2%CVE-2026-24744MEDIUMInvoicePlane has a Stored Cross-Site Scripting (XSS) issueEPSS 0.2%CVE-2026-25594MEDIUMInvoicePlane has Stored XSS via Family Name in Product FormEPSS 0.2%CVE-2026-25595MEDIUMInvoicePlane has Stored XSS via Invoice Number in Invoice View and DashboardEPSS 0.2%CVE-2026-25596MEDIUMInvoicePlane has Stored XSS via Product Unit Name in Invoice Item ListEPSS 0.2%CVE-2026-26281MEDIUMInvoicePlane has Stored Cross-Site Scripting (XSS) Issue in Sumex Invoice ViewEPSS 0.2%CVE-2026-26270MEDIUMInvoicePlane has Stored Cross-Site Scripting Issue in Identifier FormattingEPSS 0.2%