| Package | Affected versions | Patched versions |
|---|---|---|
| invoiceplane | < 1.6.4 | 1.6.4 |
File upload vulnerability in InvoicePlane through 1.6.3 allows authenticated attackers to upload arbitrary PHP files into attachments, which can later be executed remotely, leading to Remote Code Execution (RCE).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free