Lucene search

K
osvGoogleOSV:CVE-2021-36803
HistoryAug 04, 2021 - 11:15 p.m.

CVE-2021-36803

2021-08-0423:15:08
Google
osv.dev
8
akaunting version 2.1.12
cross-site scripting vulnerability
user-supplied avatar images
version 2.1.13 fix

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

24.8%

Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplied avatar images. This issue was fixed in version 2.1.13 of the product.

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

24.8%

Related for OSV:CVE-2021-36803