Skip to content
OpenAdvisories
Medium · 6.5 CVE-2021-44461 EUVD-2021-31298GHSA-hjwx-mjwp-j356

Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control th…

Published Apr 25, 2023 · Updated Aug 4, 2024 · Assigned by odoo

Vendor: Odoo Product: Odoo Enterprise

Description

Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting journal entries to inject arbitrary web script in the browser of a victim.

Affected products

VendorProductAffectedFixed
Odoo Odoo Enterprise 13.0 – ≤ 15.0 —

References