CVE-2021-44461
Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting jou…
Published Apr 25, 2023 · updated Jun 16, 2026 · odoo odoo
Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting journal entries to inject arbitrary web script in the browser of a victim.
Timeline
Detection, updates, and resolution for this record.
Apr 25, 2023 · Catalog
Detected
Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting journal entries to inject arbitrary web script in the browser of a victim.
Jun 16, 2026 · Catalog
Updated
Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting journal entries to inject arbitrary web script in the browser of a victim.
Affected
- cpe odoo/odooversion unspecified
Sources
- NIST NVDCVE-2021-44461
Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting journal entries to inject arbitrary web script in the browser of a victim.
nvd.nist.gov - Odoo SecurityCVE-2021-44461
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com