VYPR
← All advisories
High severity8.8NVD Advisory· Published May 14, 2017· Updated Jun 17, 2026

CVE-2017-8930

CVE-2017-8930

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Simple Invoices 2013.1.beta.8 allow remote attackers to hijack the authentication of admins for requests that can (1) create new administrator user accounts and take over the entire application, (2) create regular user accounts, or (3) change configuration parameters such as tax rates and the enable/disable status of PayPal payment modules.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Simple Invoices/Simple Invoices2 versions
    cpe:2.3:a:simpleinvoices:simple_invoices:2013.1:beta8:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:simpleinvoices:simple_invoices:2013.1:beta8:*:*:*:*:*:*
    • (no CPE)range: = 2013.1.beta.8

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.