Advisories · Technology
invoiceninja.
Every CVE that names invoiceninja among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
Invoice Ninja < 5.13.28 Broken Access Control via Vendor Portal
- invoiceninja
- Broken access control
- CVSS 8.7 High
InvoiceNinja - Stored XSS via Invoice/Quote Terms Field
- invoiceninja
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Invoice Ninja 5.13.26 - Open Redirect in Client Portal Login via intended Parameter
- invoiceninja
- Open redirect
- CVSS 5.4 Medium
Invoice Ninja has Stored XSS via Markdown HTML Injection in Product Notes
- invoiceninja
- Cross-site scripting (XSS)
- CVSS 5.1 Medium
invoiceninja Migration Import Import.php copy server-side request forgery
- invoiceninja
- Server-side request forgery (SSRF)