| Summary | Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on invoice and bill detail pages. An authenticated user can store HTML/JavaScript in their own profile name. |
|---|---|
| Publication Date | June 23, 2026, 1:16 a.m. |
| Registration Date | June 27, 2026, 4:10 a.m. |
| Last Update | June 23, 2026, 3:16 a.m. |