CVE-2021-44775
Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary we…
Published Apr 25, 2023 · updated Jun 16, 2026 · odoo odoo
Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.
Timeline
Detection, updates, and resolution for this record.
Apr 25, 2023 · Catalog
Detected
Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.
Jun 16, 2026 · Catalog
Updated
Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.
Affected
- cpe odoo/odooversion unspecified
Sources
- CVE.orgCVE-2021-44775
Official CVE identifier
cve.org - NIST NVDCVE-2021-44775
Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.
nvd.nist.gov - Odoo SecurityCVE-2021-44775
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com