InvoiceNinja v5-stable renders an invoice or quote’s “terms” field in the client portal using Laravel Blade’s raw output directive {!! ->terms !!} (resources/views/portal/ninja2020/invoices/includes/terms.blade.php) with no HTML sanitization.
2026年9月4日
CVE-2026-71233 [HIGH] – InvoiceNinja v5-stable renders an invoice or quote’s “terms” field in the client portal us
📑 文章目录
