CVE-2021-36805

Publication date

2021-08-04 22:20:46

Family

rapid7

State

PUBLISHED

Description

Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in the sales invoice processing component of the application. This issue was fixed in version 2.1.13 of the product.