Описание
Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow. A user with permission to create or update reports can store arbitrary HTML/JavaScript in the description field of a report.
EPSS
Процентиль: 38%
0.00441
Низкий
Дефекты
CWE-79
Связанные уязвимости
github
3 месяца назад
Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow. A user with permission to create or update reports can store arbitrary HTML/JavaScript in the description field of a report.
EPSS
Процентиль: 38%
0.00441
Низкий
Дефекты
CWE-79