Vulnerabilities in invoiceninja
8 resultsCVE-2021-3977MEDIUMCross-site Scripting (XSS) - Stored in invoiceninja/invoiceninjaEPSS 0.6%CVE-2026-83743MEDIUMinvoiceninja Invoice Ninja Vendor Portal Profile Update profile authorizationEPSS 0.4%CVE-2026-71233HIGHInvoiceNinja - Stored XSS via Invoice/Quote Terms FieldEPSS 0.4%CVE-2026-83744MEDIUMinvoiceninja Invoice Ninja invoices Endpoint Purify.php isHostSafe server-side request forgeryEPSS 0.3%CVE-2026-58450MEDIUMInvoice Ninja 5.13.26 - Open Redirect in Client Portal Login via intended ParameterEPSS 0.3%CVE-2026-33628MEDIUMInvoice Ninja Denylist Bypass may Lead to Stored XSS via Invoice Line ItemsEPSS 0.2%CVE-2026-82029HIGHInvoice Ninja < 5.13.28 Broken Access Control via Vendor PortalEPSS 0.2%CVE-2026-33742MEDIUMInvoice Ninja has Stored XSS via Markdown HTML Injection in Product NotesEPSS 0.2%