Vulnerabilities in Akaunting
11 resultsVexday analysis
O Akaunting possui 10 vulnerabilidades conhecidas na base, com 3 publicadas nos últimos 90 dias, mas nenhuma está sob exploração ativa em campos selvagens. A ausência de vulnerabilidades críticas e de exploração em larga escala reduz a urgência imediata, embora a fraqueza dominante em XSS (CWE-79) persista como vetor recorrente que merece atenção em ciclos de desenvolvimento e revisão de código.
CVE-2021-36800HIGHAkaunting OS Command Injection in 'Money.php'EPSS 1.5%CVE-2021-36801HIGHAkaunting Authentication Bypass in Company SelectionEPSS 1.1%CVE-2021-36804MEDIUMAkaunting Password Reset RelayEPSS 1.0%CVE-2021-36802MEDIUMAkaunting DoS via User-Controlled 'locale' VariableEPSS 0.9%CVE-2021-36805MEDIUMAkaunting Invoice Footer Persistent XSSEPSS 0.6%CVE-2021-36803MEDIUMAkaunting Avatar Persistent XSSEPSS 0.6%CVE-2026-11994MEDIUMAkaunting 3.1.21 - Authenticated stored XSS in report description renderingEPSS 0.4%CVE-2026-11942MEDIUMAkaunting 3.1.21 - Stored XSS in delete confirmation modalEPSS 0.4%CVE-2026-11943MEDIUMAkaunting 3.1.21 - Authenticated stored XSS in document timelineEPSS 0.4%CVE-2024-58293HIGHAkaunting 3.1.8 Server-Side Template Injection via Multiple Form FieldsEPSS 0.3%CVE-2026-71251MEDIUMAkaunting - Cross-Company Media IDOR in Customer Portal Download EndpointEPSS 0.2%