VULNERABILITY INTELLIGENCE

CVE-2026-25364

CVSS score5.3 MEDIUM

EPSS probability0.25%

CISA KEVNot currently listed

Published2026-02-19

Last modified2026-06-17

Description

Missing Authorization vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.8.