CVE-2020-11561: Nchsoftware Express Invoice

High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days.

In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen.

Affected products

• Nchsoftware Express Invoice: version 7.25 only

Published 2020-04-07. Last modified 2026-06-17.