https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 23:22:41 +0000 https://db.gcve.eu/vuln/cve-2026-118855 <p><strong>Affected:</strong> Akaunting</p> <p>Akaunting 3.3.0 contains a stored cross-site scripting vulnerability through invoice import. An authenticated user with invoice-creation permission can import HTML in an invoice status field. When another authenticated user opens that invoice&#39;s edit form, Akaunting renders the stored status in a hidden input with raw Blade output, allowing attacker-controlled markup to execute in the victim&#39;s Akaunting origin.</p> <p><strong>Affected:</strong> Akaunting</p> <p>Akaunting 3.3.0 contains a stored cross-site scripting vulnerability through invoice import. An authenticated user with invoice-creation permission can import HTML in an invoice status field. When another authenticated user opens that invoice&#39;s edit form, Akaunting renders the stored status in a hidden input with raw Blade output, allowing attacker-controlled markup to execute in the victim&#39;s Akaunting origin.</p> https://db.gcve.eu/vuln/cve-2026-118855