Vulnerabilities in invoiceninja

3 results

CVE-2021-3977MEDIUMCross-site Scripting (XSS) - Stored in invoiceninja/invoiceninjaEPSS 0.6%CVE-2026-33628MEDIUMInvoice Ninja Denylist Bypass may Lead to Stored XSS via Invoice Line ItemsEPSS 0.2%CVE-2026-33742MEDIUMInvoice Ninja has Stored XSS via Markdown HTML Injection in Product NotesEPSS 0.2%