Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BoldGrid Client Invoicing by Sprout Invoices sprout-invoices allows PHP Local File Inclusion.This issue affects Client Invoicing by Sprout Invoices: from n/a through <= 20.8.9.
CVE-2026-32401
NONE
EPSS 0.05%
Updated Mar 13, 2026
PHP
CVE Details
CVE ID
CVE-2026-32401
Published Date
Mar 13, 2026
Vendor
PHP
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.05%
Likelihood of exploitation in next 30 days
Percentile:
16.6th percentile (higher than 16.6% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory