CVE-2025-55580

n/a / n/a PUBLISHED

Description (CNA)

SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in the Clients module. An authenticated attacker can inject JavaScript that executes in other users' browsers when the Clients page is viewed. The vulnerability is fixed in version 2.3.8.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/ddobrev25/CVE-2025-55580
https://solidinvoice.co/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.