CVE-2021-44775
CVSS Score
6.5
EPSS Score
0.0%
EPSS Percentile
0th
Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.
| CWE | CWE-79 |
| Vendor | odoo |
| Product | odoo community |
| Published | Apr 25, 2023 |
| Last Updated | Aug 4, 2024 |
Stay Ahead of the Next One
Get instant alerts for odoo odoo community
Be the first to know when new medium vulnerabilities affecting odoo odoo community are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Affected Versions
Odoo / Odoo Community
0 ≤ 15.0
Odoo / Odoo Enterprise
0 ≤ 15.0
References
Credits
Holger Brunn