CVE-2026-14791 | crater-invoice-inc crater up to 6.0.6 Invoice Note InvoicesRequest.php getFormattedString notes cross site scripting (Issue 1327)

SecurityVulns
Yanac

A vulnerability categorized as problematic has been discovered in crater-invoice-inc crater up to 6.0.6. This affects the function getFormattedString of the file app/Http/Requests/InvoicesRequest.php of the component Invoice Note Handler. Executing a manipulation of the argument notes can lead to cross site scripting.

The identification of this vulnerability is CVE-2026-14791. The attack may be launched remotely. Furthermore, there is an exploit available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More