| Summary | Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the reusable delete confirmation flow. A user with permission to create or modify records, such as Items, can store HTML/JavaScript in the record name. |
|---|---|
| Publication Date | June 23, 2026, 1:16 a.m. |
| Registration Date | June 27, 2026, 4:10 a.m. |
| Last Update | June 23, 2026, 3:16 a.m. |