Security Advisory
CVE-2020-20908
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Akaunting v1.3.17 was discovered to contain a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Company Name input field.