crater-invoice-inc crater

• CVE-2026-57863 High 8.8 Crater Invoice 6.0.6 Path Traversal RCE via update/unzip endpoint 0.9%
• CVE-2026-14791 Low 3.5 crater-invoice-inc crater Invoice Note InvoicesRequest.php getFormattedString cross site scripting 0.3%