agentprime: solidinvoiceEvery new CVE for solidinvoice.https://agentprime.io/CVE-2026-61688: SolidInvoice allows cross-user access to API token request history via writable DataGrid LiveComponent propshttps://agentprime.io/advisories/CVE-2026-61688/https://agentprime.io/advisories/CVE-2026-61688/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 17:49:08 GMTCVECVE-2026-61614: SolidInvoice's long-lived API tokens accepted as URL query parameters, exposing credentials in server logs and browser historyhttps://agentprime.io/advisories/CVE-2026-61614/https://agentprime.io/advisories/CVE-2026-61614/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 17:48:16 GMTCVECVE-2026-61608: SolidInvoice's user invitation tokens have no expiry, allowing indefinite unauthorized company access via leaked or old invitation linkshttps://agentprime.io/advisories/CVE-2026-61608/https://agentprime.io/advisories/CVE-2026-61608/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 17:46:42 GMTCVECVE-2026-61686: SolidInvoice: PHP unserialize() called on client-controlled data in DataGrid LiveComponent context prophttps://agentprime.io/advisories/CVE-2026-61686/https://agentprime.io/advisories/CVE-2026-61686/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Sep 2026 17:43:56 GMTCVECVE-2026-46489: SolidInvoice: Unrestricted file upload with no MIME validation allows stored XSS via malicious SVG logohttps://agentprime.io/advisories/CVE-2026-46489/https://agentprime.io/advisories/CVE-2026-46489/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jun 2026 18:55:44 GMTCVECVE-2026-46622: SolidInvoice: API tokens stored as plaintext in the database allowing full credential compromise on database breachhttps://agentprime.io/advisories/CVE-2026-46622/https://agentprime.io/advisories/CVE-2026-46622/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jun 2026 18:55:23 GMTCVECVE-2025-9171: SolidInvoice Clients clients cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9171/https://agentprime.io/advisories/CVE-2025-9171/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Aug 2025 22:32:05 GMTCVECVE-2025-9170: SolidInvoice Tax Rates rates cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9170/https://agentprime.io/advisories/CVE-2025-9170/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Aug 2025 22:02:05 GMTCVECVE-2025-9169: SolidInvoice Quote quotes cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9169/https://agentprime.io/advisories/CVE-2025-9169/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Aug 2025 21:32:06 GMTCVECVE-2025-9168: SolidInvoice Invoice Creation invoice cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9168/https://agentprime.io/advisories/CVE-2025-9168/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Aug 2025 21:02:06 GMTCVECVE-2025-9167: SolidInvoice Recurring Invoice recurring cross site scriptinghttps://agentprime.io/advisories/CVE-2025-9167/https://agentprime.io/advisories/CVE-2025-9167/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 19 Aug 2025 20:32:06 GMTCVE