Skip to content
OpenAdvisories

Vendor

shakhi

1 known vulnerabilities.

Products

Nari Accountant 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.4
    CVE-2025-12371

    Nari Accountant <= 1.0.12 - Authenticated (Editor+) Stored Cross-Site Scripting

    The Nari Accountant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via account settings in all versions up to, and including, 1.0.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attack…

    shakhi Nari Accountant Web / CMS