What’s Vulnerable › Vulnerabilities

CVE-2020-11561

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-04-07 · updated 2026-06-17
• Weakness: CWE-425

Description

In NCH Express Invoice 7.25, an authenticated low-privilege user can enter a crafted URL to access higher-privileged functionalities such as the "Add New Item" screen.

Affected products

• Nchsoftware Express Invoice: 7.25

References

• https://tejaspingulkar.blogspot.com
• https://tejaspingulkar.blogspot.com/2020/03/cve-cve-2020-11561-title-escalation-via.html
• https://youtu.be/-i2KtBgO3Kw
• https://tejaspingulkar.blogspot.com
• https://tejaspingulkar.blogspot.com/2020/03/cve-cve-2020-11561-title-escalation-via.html
• https://youtu.be/-i2KtBgO3Kw

Get alerted when CVE-2020-11561 or the next vulnerability affects your stack