Vulnerabilities > Nchsoftware > Express Invoice > 7.12

DATE CVE VULNERABILITY TITLE RISK
2019-10-14 CVE-2019-16282 Cross-site Scripting vulnerability in Nchsoftware Express Invoice 7.12
In NCH Express Invoice v7.12, persistent cross site scripting (XSS) exists via the Invoices/Items/Customers/Quotes input field.
network
low complexity
nchsoftware CWE-79
5.4