PatchTheCVEclient invoicing by sprout invoices vulnerabilities and fixes
Recent CVEs affecting client invoicing by sprout invoices, with upgrade or downgrade steps. 1 tracked.
Also searched as: clientinvoicingbysproutinvoices.
client invoicing by sprout invoices has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-11-17. Highest priority: CVE-2021-24787 (score 34/100).
- CVE-2021-24787 MEDIUM 4.8 UPGRADE The Client Invoicing by Sprout Invoices WordPress plugin before 19.9.7 does not sanitise and escape some of it
FAQ
How do I fix client invoicing by sprout invoices vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is client invoicing by sprout invoices being exploited right now?
None of the tracked client invoicing by sprout invoices CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which client invoicing by sprout invoices CVE should I patch first?
CVE-2021-24787 currently ranks highest (34/100): The Client Invoicing by Sprout Invoices WordPress plugin before 19.9.7 does not sanitise and escape some of it.