Unknown · Akaunting 3.1.18 · CVE-2025-55522
Name of the Vulnerable Software and Affected Versions:
Akaunting version 3.1.18
Description:
A cross-site scripting (XSS) issue exists in the `/common/reports` component of the software. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the `name` parameter.
Recommendations:
As a mitigation, sanitize or encode user-supplied data for the `name` parameter in the `/common/reports` component.