Akaunting vulnerabilities

Products

• Akaunting 19

Newest

• akaunting Akaunting before 2.1.31 OS Command Injection via app alias CVE-2022-51019 8.7 HighSeptember 29, 2026
• akaunting Akaunting 3.1.21 - Improper authorization in BulkActions handle dispatch CVE-2026-19198 8.7 HighAugust 19, 2026
• akaunting CVE-2026-16772 CVE-2026-16772 8.1 HighAugust 14, 2026
• akaunting Akaunting - Cross-Company Media IDOR in Customer Portal Download Endpoint CVE-2026-71251 6.5 MediumAugust 5, 2026
• akaunting Akaunting 3.1.21 - Authenticated stored XSS in report description rendering CVE-2026-11994 4.8 MediumJune 22, 2026
• akaunting Akaunting 3.1.21 - Authenticated stored XSS in document timeline CVE-2026-11943 4.8 MediumJune 22, 2026
• akaunting Akaunting 3.1.21 - Stored XSS in delete confirmation modal CVE-2026-11942 4.8 MediumJune 22, 2026
• akaunting Akaunting 3.1.8 Server-Side Template Injection via Multiple Form Fields CVE-2024-58293 8.6 HighDecember 11, 2025
• akaunting Cross-site scripting (XSS) vulnerability in the component /common/reports of Akaunting v3.1.18... CVE-2025-55522 6.5 MediumAugust 21, 2025
• akaunting An issue in the component /settings/localisation of Akaunting v3.1.18 allows authenticated... CVE-2025-55521 6.5 MediumAugust 21, 2025
• akaunting An OS command injection vulnerability exists in Akaunting v3.1.3 and earlier. An attacker can... CVE-2024-22836 Public exploit EPSS 30.0% 9.8 CriticalFebruary 8, 2024
• akaunting Akaunting v1.3.17 was discovered to contain a stored cross-site scripting (XSS) vulnerability... CVE-2020-20908 5.4 MediumOctober 25, 2021
• akaunting Akaunting Invoice Footer Persistent XSS CVE-2021-36805 5.2 MediumAugust 4, 2021
• akaunting Akaunting Password Reset Relay CVE-2021-36804 Fix available 5.4 MediumAugust 4, 2021
• akaunting Akaunting Avatar Persistent XSS CVE-2021-36803 6.3 MediumAugust 4, 2021
• akaunting Akaunting DoS via User-Controlled 'locale' Variable CVE-2021-36802 6.5 MediumAugust 4, 2021
• akaunting Akaunting Authentication Bypass in Company Selection CVE-2021-36801 8.1 HighAugust 4, 2021
• akaunting Akaunting OS Command Injection in 'Money.php' CVE-2021-36800 8.7 HighAugust 4, 2021
• akaunting Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function.... CVE-2020-22390 8.8 HighJune 21, 2021