Medium severityNVD Advisory· Published Jun 22, 2026· Updated Jun 22, 2026

CVE-2026-11994

Description

Akaunting 3.1.21 contains an authenticated stored Cross-Site Scripting vulnerability in the report management workflow. A user with permission to create or update reports can store arbitrary HTML/JavaScript in the description field of a report.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Akaunting/Akauntingllm-fuzzy
Range: <3.1.21

Patches

Vulnerability mechanics

References

fluidattacks.com/es/advisories/believernvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000