MATCHA INVOICE vulnerabilities

2 known vulnerabilities in MATCHA INVOICE from ICZ. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  MATCHA INVOICE: Unrestricted Upload of File with Dangerous Type

  CVE-2026-33273Apr 8, 2026ICZ

  Unrestricted upload of file with dangerous type issue exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, an arbitrary file may be created by an administrator of the product. As a result, arbitrary code may be executed on the server

• 8.7 High severity

  MATCHA INVOICE: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-24913Apr 8, 2026ICZ

  SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, information stored in the database may be obtained or altered by a user who can log in to the product.