CVE-2023-25439: Squarepiginteractive Fusioninvoice

Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days.

Stored Cross Site Scripting (XSS) vulnerability in Square Pig FusionInvoice 2023-1.0, allows attackers to execute arbitrary code via the description or content fields to the expenses, tasks, and customer details.

Affected products

• Squarepiginteractive Fusioninvoice: version 2023-1.0 only

Published 2023-05-25. Last modified 2026-06-17.