Invoiceplane vulnerabilities
27 CVEs and advisories name Invoiceplane as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-55561InvoicePlane: Guest user IDOR in quote approval and rejection
- CVE-2026-100392InvoicePlane: Primary Administrator Privilege Downgrade via `Users::form()` (Missing Object-Level Authorization)
- CVE-2026-100371InvoicePlane: Incomplete Authorization Remediation in Users::form() Enables Primary Administrator Account Takeover via Email Reassignment and Password Recovery
- CVE-2026-88003InvoicePlane: Failure to Revoke Administrative Privileges After Role Downgrade
- CVE-2026-49850InvoicePlane: Missing CSRF Protection on State-Changing delete Actions
- CVE-2026-50547InvoicePlane permits local file inclusion through the e-invoice XML configuration identifier
- CVE-2026-33639InvoicePlane permits DDL injection through tax_rate_decimal_places
- CVE-2026-39353InvoicePlane: Remote Code Execution via Writable Templates Directory
- CVE-2026-85293InvoicePlane: Stored Cross-Site Scripting (XSS) via Client Email in Invoice and Quote Mailer Forms
- CVE-2026-85291InvoicePlane IDOR: Horizontal Privilege Escalation via Password Change Without Authorization Check
- CVE-2026-85289InvoicePlane: Missing CSRF Token Validation on Multiple Delete Endpoints
- CVE-2026-85292InvoicePlane: Loose Type Comparison in Core Authentication Check (Defense-in-Depth)
- CVE-2026-85274InvoicePlane: Recurring Invoice State Change via GET Request Without CSRF Protection
- CVE-2026-85290InvoicePlane: Log Injection via Unsanitized User Input in Cron Key Error Logging
- CVE-2026-39372InvoicePlane: Sensitive Information Disclosure via Unstripped EXIF Metadata in Attachments
- CVE-2026-54790InvoicePlane: Second-order SQL injection through the unvalidated custom_field_table field in the Custom Fields module
- CVE-2026-26281InvoicePlane has Stored Cross-Site Scripting (XSS) Issue in Sumex Invoice View
- CVE-2026-26270InvoicePlane has Stored Cross-Site Scripting Issue in Identifier Formatting
- CVE-2026-25596InvoicePlane has Stored XSS via Product Unit Name in Invoice Item List
- CVE-2026-25595InvoicePlane has Stored XSS via Invoice Number in Invoice View and Dashboard
- CVE-2026-25594InvoicePlane has Stored XSS via Family Name in Product Form
- CVE-2026-25548InvoicePlane Vulnerable to Remote Code Execution via Local File Inclusion and Log Poisoning
- CVE-2026-24745InvoicePlane has a Stored Cross-Site Scripting (XSS) issue
- CVE-2026-24744InvoicePlane has a Stored Cross-Site Scripting (XSS) issue
- CVE-2026-24743InvoicePlane has a Stored Cross-Site Scripting (XSS) issue
- CVE-2026-24746InvoicePlane has a Stored Cross-Site Scripting (XSS) issue
- CVE-2026-23491InvoicePlane has Unauthenticated Path Traversal in Guest Controller