All vulnerabilities

Servers and applications

CVE-2021-44461

Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting journal entries to inject arbitrary web script in the browser of a victim.

Severity
Medium 6.1
Published
25 Apr 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
OdooServers and applications · cpe:a:odoo:odoo
  • From 13.0 up to 15.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-44461
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-44461