CVE-2026-71233 - InvoiceNinja - Stored XSS via Invoice/Quote Terms Field

Back Back to CVE browser

HIGH

InvoiceNinja - Stored XSS via Invoice/Quote Terms Field

Published Aug 5, 2026

8.7

HIGH

CVSS 3.1

EPSS 0.35%

Description

InvoiceNinja v5-stable renders an invoice or quote's "terms" field in the client portal using Laravel Blade's raw output directive {!! ->terms !!} (resources/views/portal/ninja2020/invoices/includes/terms.blade.php) with no HTML sanitization.

Affected products

Vendor Invoiceninja Product Invoiceninja Default
unknown
Affected
- 5.0.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Invoiceninja	Invoiceninja	unknown	Affected 5.0.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-53306
Advisory
https://github.com/invoiceninja/invoiceninja
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-53306		Advisory
https://github.com/invoiceninja/invoiceninja		third-party-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner TuranSec

Published Aug 5, 2026

Updated Aug 10, 2026

Reserved Aug 5, 2026

Link CVE-2026-71233

CISA Vulnrichment

Updated Aug 5, 2026

NVD

Status Deferred

Modified Aug 26, 2026

Link CVE-2026-71233

Red Hat

No data

ENISA EUVD

Assigner TuranSec

Published Aug 5, 2026

Updated Aug 10, 2026

Link EUVD-2026-53306

GitHub

No data