← CVE Intelligence

CVE-2021-36803

Akaunting Avatar Persistent XSS PUBLISHED

Description (CNA)

Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplied avatar images. This issue was fixed in version 2.1.13 of the product.

Affected (CNA)

Vendor / productVersions
Akaunting / Akauntingaffected 2.1.12 through 2.1.12

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.