CVE-2020-11560: Nchsoftware Express Invoice

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

NCH Express Invoice 7.25 allows local users to discover the cleartext password by reading the configuration file.

Affected products

• Nchsoftware Express Invoice: version 7.25 only

Published 2020-04-07. Last modified 2026-06-17.