CVE-2021-3977

MEDIUM CVSS: 5.4 Published: 2021-12-24 Modified: 2026-06-17

Description

invoiceninja is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected Platforms

Invoiceninja Invoice Ninja

Weakness Type

CWE-79

References