Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Packages
invoiceninja/invoiceninja
invoiceninja/invoiceninja vulnerabilities (Packagist)
1 vulnerability.
invoiceninja/invoiceninja
Packagist
Invoice Ninja Denylist Bypass may Lead to Stored XSS via Invoice Line Items
CVE-2026-33628
Fix available
5.4
Medium
March 24, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open