CVE-2020-20908

Akaunting v1.3.17 was discovered to contain a stored cross-site scripting XSS vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Company Name input field...

Cross site scripting

Akaunting v1.3.17 was discovered to contain a stored cross-site scripting XSS vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Company Name input field...

CVE-2020-20908

Akaunting v1.3.17 was discovered to contain a stored cross-site scripting XSS vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Company Name input field...

CVE-2020-20908

CVE-2020-20908 affects Akaunting v1.3.17, with a stored XSS vulnerability in the Company Name input field. The root cause noted in CNVD-style sources is insufficient filtering/validation of user-supplied data, allowing an attacker to inject and execute JavaScript in the client context. Public ref...