| Package | Affected versions | Patched versions |
|---|---|---|
| express invoice | = 7.25 |
In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free