https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:05:23.554754+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-251715 EUVD-2026-251715 2026-10-06T14:05:23.639600+00:00 EUVD-2026-251715 https://cve.radiocsirt.org/vuln/fkie_cve-2025-55580 fkie_cve-2025-55580 2026-10-06T14:05:23.639644+00:00

SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in the Clients module. An authenticated attacker can inject JavaScript that executes in other users' browsers when the Clients page is viewed. The vulnerability is fixed in version 2.3.8.

 https://cve.radiocsirt.org/vuln/ghsa-f9jq-jw9w-3752 GHSA-f9jq-jw9w-3752 2026-10-06T14:05:23.639689+00:00

SolidInvoice 2.3.7 and v.2.3.8 is vulnerable to Cross Site Scripting (XSS) in the client's functionality.