CVE-2026-11943 Akaunting 3.1.21 - Authenticated stored XSS in document timeline

Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...

CVE-2026-11943 Akaunting 3.1.21 - Authenticated stored XSS in document timeline

Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...

CVE-2026-11943

CVE-2026-11943 affects Akaunting 3.1.21 and is an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name, which can be reflected in the UI. The CVSS4 vector ...

CVE-2026-11943 Akaunting 3.1.21 - Authenticated stored XSS in document timeline

Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...

CVE-2026-6645

creationtimestamp| type| source ---|---|--- 2026-06-22 04:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116791877623901189 2026-06-22 04:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mou2gzwtck2t 2026-06-22 04:37:44+00:00| seen|...

CVE-2026-11943: Improper Neutralization of Input During Web Page Generation

Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...

PT-2026-51328

Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name...

CVE-2026-12805

creationtimestamp| type| source ---|---|--- 2026-06-21 21:54:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3motedaxnnf23...

CVE-2026-12786

creationtimestamp| type| source ---|---|--- 2026-06-21 09:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116787277091790305 2026-06-21 11:45:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moscbep5rm2n...

CVE-2026-56228

creationtimestamp| type| source ---|---|--- 2026-06-20 20:46:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moqq2ovth22l...

CVE-2009-4919

creationtimestamp| type| source ---|---|--- 2026-06-19 16:07:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3monpy2ym7t2p...

CVE-2026-49230

creationtimestamp| type| source ---|---|--- 2026-06-19 15:47:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3monoullf4522 2026-07-13 22:00:05+00:00| seen| https://t.me/GithubRedTeam/92739 2026-07-14 00:00:09+00:00| seen| https://t.me/GithubRedTeam/92739 2026-07-15...

CVE-2026-20190

creationtimestamp| type| source ---|---|--- 2026-06-17 18:24:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiwpw3s7724 2026-06-17 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1928 2026-06-18 13:15:12+00:00| seen|...

CVE-2026-46921

creationtimestamp| type| source ---|---|--- 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-07-02 10:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpntlvdnks2g...

CVE-2026-35306

creationtimestamp| type| source ---|---|--- 2026-06-17 05:04:25+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mohjz6m67e2e 2026-06-17 05:31:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-8 2026-06-18 13:37:06+00:00| seen|...

CVE-2024-24909

creationtimestamp| type| source ---|---|--- 2026-06-16 17:38:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogdpbkw632c 2026-06-16 20:45:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mogo4kdafl2r 2026-06-25 07:00:40+00:00| seen|...

CVE-2026-11850

creationtimestamp| type| source ---|---|--- 2026-06-15 22:40:51+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3moee4eyg372o 2026-07-21 12:01:10+00:00| seen| https://bsky.app/profile/lambdawatchdog.bsky.social/post/3mr5r5pjbkd2z 2026-07-29 12:01:42+00:00| seen|...

CVE-2026-50560

creationtimestamp| type| source ---|---|--- 2026-06-15 22:11:13+00:00| seen| https://gist.github.com/alon710/b74444b3a1d431dd08f4a234b8c8a8c9...

CVE-2026-8613

The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'titletag' Widget Setting in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2026-41856

creationtimestamp| type| source ---|---|--- 2026-06-11 08:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnyr3dgend2x 2026-06-11 09:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116730653982449979 2026-06-11 09:00:29+00:00| seen|...