medium5.4
CVE-2025-55579
SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality.
Impact
SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality. The vulnerability is fixed in version 2.3.8.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solidinvoice | Solidinvoice | Version 2.3.7 |