CVE-2025-55579: Solidinvoice

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

SolidInvoice version 2.3.7 is vulnerable to a Stored Cross-Site Scripting (XSS) issue in the Tax Rates functionality. The vulnerability is fixed in version 2.3.8.

Affected products

• Solidinvoice Solidinvoice: version 2.3.7 only

Published 2025-08-29. Last modified 2026-06-17.