Skip to content
InvoicePlane
Productivity & Wikis
A libre self‑hosted web application for managing invoices, clients, and payments.
PHP
·
Latest v1.6.5 · 5mo ago
Security brief →
Features
-
Create, send, and manage professional Invoices and Quotes
-
Maintain detailed client records with transaction history
-
Manage products, projects, and tasks for invoicing
-
Track payments, set reminders, and integrate multiple payment gateways
-
Customize templates, themes, and settings to match your brand
v1.6.5
Security relevant
·
Breaking changes
- SVG logo uploads now disabled
Security fixes
- XSS vulnerabilities fixed through sanitization
- SVG upload restriction to prevent XSS
v1.7.1
Security relevant
·
Breaking changes
- SVG logo uploads now disabled; existing SVGs blocked
Security fixes
- Multiple XSS vulnerabilities fixed through input sanitization and output escaping
- SVG logo XSS vectors eliminated by disabling SVG uploads
Notable features
- Proper HTML escaping of invoice numbers, tax rates, and payment methods
- SVG upload restriction to PNG/JPG/GIF only
v1.6.4
Security relevant
·
Security fixes
- File access vulnerabilities across all controllers
- Log sanitization for client einvoicing fields
Notable features
- PayPal Advanced Credit Cards & Venmo support
- Email address verification with comma/semicolon support
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
About
Languages
PHP
·
SCSS
·
JavaScript
Search tools, categories, lists, and users
Use ↑↓ to navigate, Enter to open, Esc to close
No results for ""
⌘K to open
↑↓ navigate
⏎ open
