GetPaid vulnerabilities

3 known vulnerabilities in GetPaid from Stiofan. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  GetPaid: Improper Neutralization of Input During Web Page Generation

  CVE-2026-115609Oct 28, 2026Stiofan

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Stiofan GetPaid invoicing allows Stored XSS.This issue affects GetPaid: from n/a through 2.8.62.

• 7.5 High severity

  GetPaid: Insertion of Sensitive Information Into Sent Data

  CVE-2026-49064Jun 15, 2026Stiofan

  Insertion of Sensitive Information Into Sent Data vulnerability in Stiofan GetPaid allows Retrieve Embedded Sensitive Data. This issue affects GetPaid: from n/a through 2.8.49.

• 8.8 High severity

  GetPaid: Missing Authorization

  CVE-2024-43973Nov 1, 2024Stiofan

  Missing Authorization vulnerability in Stiofan GetPaid invoicing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GetPaid: from n/a through <= 2.8.11.