Sourcecodester Indian Invoicing System vulnerabilities

4 CVEs affecting Sourcecodester Indian Invoicing System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-9414, published 2026-05-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-9413, published 2026-05-25. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was identified in SourceCodester Indian Invoicing System 1.0. The affected element is an unknown function of the file /Invoicing/category.php. The manipulation of the argument msg…
CVE-2026-9412, published 2026-05-25. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was determined in SourceCodester Indian Invoicing System 1.0. Impacted is an unknown function of the component Backend Endpoint. Executing a manipulation can lead to improper access…
CVE-2026-9414, published 2026-05-25. Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days. A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0. The impacted element is an unknown function of the file /Invoicing/add_order.php of the component Invoice…
CVE-2026-9411, published 2026-05-25. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Indian Invoicing System 1.0. This issue affects some unknown processing of the file /Invoicing/IGST_Invoice.php of the component Invoice Generation…