← Database

CVE-2021-36803

MEDIUM CVSS: 6.3 Published: 2021-08-04 Modified: 2026-06-17

Description

Akaunting version 2.1.12 and earlier suffers from a persistent (type II) cross-site scripting (XSS) vulnerability in processing user-supplied avatar images. This issue was fixed in version 2.1.13 of the product.

Affected Platforms

Akaunting Akaunting

Weakness Type

CWE-79, CWE-79

References