PatchTheCVEsolidinvoice vulnerabilities and fixes
Recent CVEs affecting solidinvoice, with upgrade or downgrade steps. 7 tracked.
solidinvoice has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2025-08-29. Highest priority: CVE-2025-55580 (score 29/100).
- CVE-2025-9171 LOW 3.5 UPGRADE A security flaw has been discovered in SolidInvoice up to 2.4.0
- CVE-2025-9170 LOW 3.5 UPGRADE A vulnerability was identified in SolidInvoice up to 2.4.0
- CVE-2025-9169 LOW 3.5 UPGRADE A vulnerability was determined in SolidInvoice up to 2.4.0
- CVE-2025-9168 LOW 3.5 UPGRADE A vulnerability was found in SolidInvoice up to 2.4.0
- CVE-2025-9167 LOW 3.5 UPGRADE A vulnerability has been found in SolidInvoice up to 2.4.0
- CVE-2025-55580 MEDIUM 5.4 DOWNGRADE SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in the Clients module
- CVE-2025-55579 MEDIUM 5.4 DOWNGRADE SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functio
FAQ
How do I fix solidinvoice vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is solidinvoice being exploited right now?
None of the tracked solidinvoice CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which solidinvoice CVE should I patch first?
CVE-2025-55580 currently ranks highest (29/100): SolidInvoice version 2.3.7 is vulnerable to a stored cross-site scripting (XSS) issue in the Clients module.