Skip to contentInvoiceninja Invoice Ninja vulnerabilities
- invoiceninja invoice ninjaInvoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in...CVE-2026-299257.7 High
- invoiceninja invoice ninja, invoiceninja +1 moreInvoice Ninja has Stored XSS via Markdown HTML Injection in Product NotesCVE-2026-337425.4 Medium
- invoiceninja invoice ninja, invoiceninja +1 moreInvoice Ninja Denylist Bypass may Lead to Stored XSS via Invoice Line ItemsCVE-2026-33628Fix available5.4 Medium
- invoiceninja invoiceninja/invoiceninja, invoice ninja +1 moreCross-site Scripting (XSS) - Stored in invoiceninja/invoiceninjaCVE-2021-3977Fix available6.5 Medium
- invoiceninja invoice ninjaIn Invoice Ninja before 4.4.0, there is an unsafe call to unserialize() in app/Ninja/Repositories...CVE-2021-338988.1 High
- invoiceninja invoice ninjaInvoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within...CVE-2017-10004665.4 Medium