CVE-2026-71233

InvoiceNinja - Stored XSS via Invoice/Quote Terms Field PUBLISHED

Description (CNA)

InvoiceNinja v5-stable renders an invoice or quote's "terms" field in the client portal using Laravel Blade's raw output directive {!! ->terms !!} (resources/views/portal/ninja2020/invoices/includes/terms.blade.php) with no HTML sanitization.

Affected (CNA)

Vendor / product	Versions
invoiceninja / invoiceninja	affected 5.0.0

CWE

CWE-79

References

https://github.com/invoiceninja/invoiceninja

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.