CVE-2021-36805

CVE-2021-36805 refers to Akaunting v2.1.12 and earlier, with a persistent (type II) cross-site scripting (XSS) vulnerability in the invoice footer processing during sales invoices. The issue originates from HTML/footer handling that bypasses built‑in firewall filtering, enabling injected JavaScri...