Client Invoicing by Sprout Invoices vulnerabilities

2 known vulnerabilities in Client Invoicing by Sprout Invoices from BoldGrid. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Client Invoicing by Sprout Invoices: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2026-32401Mar 13, 2026BoldGrid

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows PHP Local File Inclusion.This issue affects Client Invoicing by Sprout

• 9.8 Critical severity

  Client Invoicing by Sprout Invoices: Deserialization of Untrusted Data

  CVE-2025-64227Dec 18, 2025BoldGrid

  Deserialization of Untrusted Data vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Object Injection.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.7.