Login Request a demo
IN
Product
Invoice Ninja
by invoiceninja · last CVE Sep 1, 2026
8
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 2Medium 6Low 0
Severity
All severities8Critical0High2Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Invoice Ninja to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-83743
6.3
0%
Sep 1
invoiceninja Invoice Ninja Vendor Portal Profile Update profile authorization
Affected: 5.13.0; 5.13.1; 5.13.2; 5.13.3; 5.13.4; 5.13.5; +21 more
CVE-2026-33742
5.4
0%
Mar 26
Invoice Ninja has Stored XSS via Markdown HTML Injection in Product Notes
Affected: before 5.13.4
CVE-2026-33628
5.4
0%
Mar 26
Invoice Ninja Denylist Bypass may Lead to Stored XSS via Invoice Line Items
Affected: before 5.13.4
CVE-2021-3977
5.4
1%
Dec 24
invoiceninja is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected: before 4.5.47; 5.0 before 5.3.33
CVE-2017-1000466
5.4
1%
Jan 3
Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution…
Affected: 3.8.1
CVE-2026-83744
4.3
0%
Sep 1
invoiceninja Invoice Ninja invoices Endpoint Purify.php isHostSafe server-side request forgery
Affected: 5.13.0; 5.13.1; 5.13.2; 5.13.3; 5.13.4; 5.13.5; +21 more
Showing 6