Andreas Perhab

**Name of the Vulnerable Software and Affected Versions** Odoo Community versions 15.0 and earlier Odoo Enterprise versions 15.0 and earlier **Description** The issue allows remote attackers to inject arbitrary web script in the browser of a victim via a crafted link. This is a cross-site scripting (XSS) issue. **Recommendations** For Odoo Community versions 15.0 and earlier, update to a version later than 15.0 to resolve the issue. For Odoo Enterprise versions 15.0 and earlier, update to a version later than 15.0 to resolve the issue. As a temporary workaround, consider restricting access to crafted links to minimize the risk of exploitation.