CVE-2026-118368

Akaunting version 3.3.0 is vulnerable to a stored cross-site scripting (XSS) flaw within the XLSX item-import workflow. An authenticated Manager can exploit this by importing an item containing malicious HTML in its name. When another authenticated user selects this item while creating a document...