High severity8.8NVD Advisory· Published May 14, 2017· Updated May 13, 2026
CVE-2017-8930
CVE-2017-8930
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in Simple Invoices 2013.1.beta.8 allow remote attackers to hijack the authentication of admins for requests that can (1) create new administrator user accounts and take over the entire application, (2) create regular user accounts, or (3) change configuration parameters such as tax rates and the enable/disable status of PayPal payment modules.
Affected products
1- cpe:2.3:a:simpleinvoices:simple_invoices:2013.1:beta8:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/simpleinvoices/simpleinvoices/issues/270nvdThird Party Advisory
News mentions
0No linked articles in our index yet.