CVE-2020-22390

8.8 highEPSS 1.6%

High (8.8) in akaunting akaunting. EPSS 1.6% chance of exploitation in the next 30 days.

Akaunting <= 2.0.9 is vulnerable to CSV injection in the Item name field, export function. Attackers can inject arbitrary code into the name parameter and perform code execution when the crafted file is opened.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-1236
Published: 2021-06-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

akaunting:akaunting

References

https://cqinfo.la/csv-injection-in-akaunting/
https://cqinfo.la/csv-injection-in-akaunting/

Check your stack JSON