https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:15:43.646814+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-11942 CVE-2026-11942 — Akaunting 3.1.21 - Stored XSS in delete confirmation modal 2026-10-08T10:15:43.664680+00:00

Affected: Akaunting

Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the reusable delete confirmation flow. A user with permission to create or modify records, such as Items, can store HTML/JavaScript in the record name.