Vulnerabilities in Akaunting
14 resultsCVE-2022-51019HIGHAkaunting before 2.1.31 OS Command Injection via app aliasEPSS 1.8%CVE-2021-36800HIGHAkaunting OS Command Injection in 'Money.php'EPSS 1.5%CVE-2021-36801HIGHAkaunting Authentication Bypass in Company SelectionEPSS 1.1%CVE-2021-36802MEDIUMAkaunting DoS via User-Controlled 'locale' VariableEPSS 1.0%CVE-2021-36804MEDIUMAkaunting Password Reset RelayEPSS 1.0%CVE-2021-36805MEDIUMAkaunting Invoice Footer Persistent XSSEPSS 0.6%CVE-2021-36803MEDIUMAkaunting Avatar Persistent XSSEPSS 0.6%CVE-2026-11943MEDIUMAkaunting 3.1.21 - Authenticated stored XSS in document timelineEPSS 0.4%CVE-2026-11942MEDIUMAkaunting 3.1.21 - Stored XSS in delete confirmation modalEPSS 0.4%CVE-2026-11994MEDIUMAkaunting 3.1.21 - Authenticated stored XSS in report description renderingEPSS 0.4%CVE-2024-58293HIGHAkaunting 3.1.8 Server-Side Template Injection via Multiple Form FieldsEPSS 0.4%CVE-2026-16772HIGHCVE-2026-16772EPSS 0.4%CVE-2026-71251MEDIUMAkaunting - Cross-Company Media IDOR in Customer Portal Download EndpointEPSS 0.3%CVE-2026-19198HIGHAkaunting 3.1.21 - Improper authorization in BulkActions handle dispatchEPSS 0.3%