← Database

CVE-2026-33273

HIGH CVSS: 7.2 Published: 2026-04-08 Modified: 2026-07-24

Description

Unrestricted upload of file with dangerous type issue exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, an arbitrary file may be created by an administrator of the product. As a result, arbitrary code may be executed on the server.

Affected Platforms

Icz Matcha Invoice

Weakness Type

CWE-434

References