16 matches found
CVE-2026-71233: Improper Neutralization of Input During Web Page Generation
InvoiceNinja v5-stable renders an invoice or quote's "terms" field in the client portal using Laravel Blade's raw output directive !! -terms !! resources/views/portal/ninja2020/invoices/includes/terms.blade.php with no HTML sanitization...
8.7CVSS5.8AI score0.00353EPSS
SaveExploits0References2
20