Invoice Project Invoice — known CVE vulnerabilities

Every CVE whose affected-product data names Invoice Project Invoice, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2015-4382 — CVSS 6.8 (medium): Multiple cross-site request forgery (CSRF) vulnerabilities in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for…
• CVE-2015-4381 — CVSS 3.5 (low): Cross-site scripting (XSS) vulnerability in the Invoice module 6.x-1.x before 6.x-1.2 and 7.x-1.x before 7.x-1.3 for Drupal allows remote…