Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3777-v3gr-3jr3

Опубликовано: 22 июн. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 4.8

Описание

Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow. A user with permission to create or update reports can store arbitrary HTML/JavaScript in the description field of a report.

Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow. A user with permission to create or update reports can store arbitrary HTML/JavaScript in the description field of a report.

EPSS

Процентиль: 38%
0.00441
Низкий

4.8 Medium

CVSS4

Дефекты

CWE-79

Связанные уязвимости

nvd
3 месяца назад

Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow. A user with permission to create or update reports can store arbitrary HTML/JavaScript in the description field of a report.

EPSS

Процентиль: 38%
0.00441
Низкий

4.8 Medium

CVSS4

Дефекты

CWE-79