Invoice Ninja 5 vulnerabilities
1 known vulnerability in Invoice Ninja 5 from Invoice Ninja. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest first
- 8.6 High severity
Invoice Ninja 5: Unrestricted Upload of File with Dangerous Type
Incorrect handling of uploaded files in the admin "Restore" function in Invoice Ninja <= 5.11.72 allows attackers with admin credentials to execute arbitrary code on the server via uploaded .php files.