BottleCRM versions 0.30 through 1.14.5 contain an HTML injection flaw in the render_invoice_template() function. Authentication is required, and members of a target organization can insert arbitrary HTML and CSS into invoice fields such as notes, terms, client names, and addresses. The injection can surface in PDFs that the system supplies via direct download, through public links, or embedded in email attachments, enabling attackers to overlay totals and payment instructions, potentially deceiving recipients.

The vulnerability affects the BottleCRM web application developed by MicroPyramid. All releases from version 0.30 up to and including 1.14.5 are vulnerable. The affected component is the invoice PDF rendering pipeline that stores user‑provided template data.

The CVSS score of 5.1 signals a moderate severity. The EPSS score of 0.0035 indicates a very low probability of exploitation, and the flaw is not listed in the CISA KEV catalog. Exploitation requires authentication, but once a legitimate organization member has access, they can manipulate PDF content without additional conditions. The attack vector is through the application’s web interface, where the user supplies invoice data. The impact is mainly integrity and deception; attackers could mislead recipients by adding custom payment instructions or hiding total amounts.