CVE-2018-11442: Easyservice Billing Project Easyservice Billing

High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days.

A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3-new2.php?add=true&id= URI, as demonstrated by adding a new quotation.

Affected products

• Easyservice Billing Project Easyservice Billing: version 1.0 only

Published 2018-05-25. Last modified 2026-06-17.