Approved changes feed: RSS · Atom

cpe:2.3:a:invoiceninja:invoice_ninja:3.8.1:*:*:*:*:*:*:*

part: a version: 3.8.1 update: *

VendorInvoiceninja (35a6f006-e570-5a3e-8534-58722d7d2394)
ProductInvoice Ninja (38753940-3207-59cf-859e-e0fcaca60b8b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/invoiceninja/invoiceninja purl2cpe 2026-06-01 10:15:05.228063

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-1000466 vulnerable 2026-06-08 05:08:34.585598 Details available
Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code.
Published: 2018-01-03T01:00:00.000Z
Updated: 2024-09-16T22:19:51.802Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.