CVE-2017-8930

CVE-2017-8930 describes multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Simple Invoices 2013.1.beta.8. An unauthenticated attacker could exploit these flaws by tricking an authenticated administrator into clicking a malicious link, leading to the creation of new administrator accounts, regular user accounts, or modification of critical application settings like tax rates and payment module configurations. This vulnerability carries a high CVSS score of 8.8, indicating a severe impact with high confidentiality, integrity, and availability compromise, and requires user interaction. There is no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this CVE.