CVE-2021-26263

MEDIUM
STIX 2.1 vulnerability

Record summary

CVE-2021-26263 has a selected CVSS score of 6.1 (medium).

Description

Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject arbitrary web script in the browser of a victim, by posting crafted contents.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jul 15, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

Odoo Community

Browse Odoo / Odoo Community

Default status: unaffected

CVE List14.0 to ≤ 15.0affected

Odoo Enterprise

Browse Odoo / Odoo Enterprise

Default status: unaffected

CVE List14.0 to ≤ 15.0affected

References

3