Login Request a demo
IN
Product
invoiceninja
by invoiceninja · last CVE Aug 5, 2026
4
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 1Medium 3Low 0
Severity
All severities4Critical0High1Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add invoiceninja to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-71233
8.7
0%
Aug 5
InvoiceNinja - Stored XSS via Invoice/Quote Terms Field
Affected: 5.0.0
CVE-2026-33742
5.4
0%
Mar 26
Invoice Ninja has Stored XSS via Markdown HTML Injection in Product Notes
Affected: < 5.13.4
CVE-2026-33628
5.4
0%
Mar 26
Invoice Ninja Denylist Bypass may Lead to Stored XSS via Invoice Line Items
Affected: < 5.13.4
CVE-2026-58450
4.3
0%
Jun 30
Invoice Ninja 5.13.26 - Open Redirect in Client Portal Login via intended Parameter
Affected: through 5.13.26
Showing 4