HIGH Published Oct 28, 2026

CVE-2026-115609

CVE-2026-115609 published: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan GetPaid invoicing allows Stored XSS.This issue affects GetPaid: from n/a through 2.8.62.

View full NVD advisory → ← Back to CVE watch

CVE-2026-115609

Related reading