The vulnerability can be exploited in the following scenario: the attacker provides values for the output options, for example via a web interface. These values are then passed unsanitized ...

Total Revenue, Paid/Pending Invoices, and Active Customers. Revenue trends and monthly billing graphs. Recent invoices list with quick actions.