Oldmoon Cashbook vulnerabilities

• oldmoon cashbook cashbook v4.0.3 has an arbitrary file read vulnerability in /api/entry/flow/invoice/show?invoice=. CVE-2025-27980 6.5 MediumApril 15, 2025