IN
Vendor
invoiceninja
12
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-83744 | IN Invoice Ninja invoiceninja | 4.3 | Sep 1 | invoiceninja Invoice Ninja invoices Endpoint Purify.php isHostSafe server-side request forgery |
| CVE-2026-83743 | IN Invoice Ninja invoiceninja | 6.3 | Sep 1 | invoiceninja Invoice Ninja Vendor Portal Profile Update profile authorization |
| CVE-2026-71233 | IN invoiceninja invoiceninja | 8.7 | Aug 5 | InvoiceNinja - Stored XSS via Invoice/Quote Terms Field |
| CVE-2026-58450 | IN invoiceninja invoiceninja | 4.3 | Jun 30 | Invoice Ninja 5.13.26 - Open Redirect in Client Portal Login via intended Parameter |
| CVE-2026-29925 | IN Invoice Ninja Invoiceninja | 7.7 | Mar 30 | Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php |
| CVE-2026-33742 | IN invoiceninja invoiceninja | 5.4 | Mar 26 | Invoice Ninja has Stored XSS via Markdown HTML Injection in Product Notes |
| CVE-2026-33628 | IN invoiceninja invoiceninja | 5.4 | Mar 26 | Invoice Ninja Denylist Bypass may Lead to Stored XSS via Invoice Line Items |
| CVE-2021-3977 | IN Invoice Ninja Invoiceninja | 5.4 | Dec 24 | invoiceninja is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
| CVE-2021-33898 | IN Invoice Ninja Invoiceninja | 8.1 | Jun 6 | In Invoice Ninja before 4.4.0, there is an unsafe call to unserialize() in app/Ninja/Repositories/AccountRepository.php that may allow an attacker to deserialize arbitrary PHP… |
| CVE-2017-1000466 | IN Invoice Ninja Invoiceninja | 5.4 | Jan 3 | Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution… |