Loading vulnerability details…
CVSS v3.1
N/A
CVSS v4.0
8.7
EPSS
0.30%
Published
Apr 8, 2026
Modified
Jul 25, 2026
Public PoC / Exploit
All weaponized →No public PoC or exploit code indexed for this CVE.
Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, information stored in the database may be obtained or altered by a user who can log in to the product.
Weaknesses (CWE)
Affected Products (1)
References (2)