VULNERABILITY INTELLIGENCE

CVE-2024-58293

CVSS score8.6 HIGH

EPSS probability0.35%

CISA KEVNot currently listed

Published2025-12-11

Last modified2026-10-27

Description

Akaunting 3.1.8 contains a server-side template injection vulnerability that allows authenticated administrators to execute template expressions in multiple form input fields. Attackers can inject template payloads in items, taxes, transactions, and vendor name fields to perform arithmetic operations and string manipulations.