Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2021-44775

Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in t

Description

Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Odoo Odoo Community

Default version status: unaffected

  • 0 to ≤ 15.0affected

Odoo Odoo Enterprise

Default version status: unaffected

  • 0 to ≤ 15.0affected

References