Cross-site Scripting Vulnerability in Odoo Community and Enterprise Applications

CVE-2021-44775

What is CVE-2021-44775?

A cross-site scripting vulnerability exists in the web applications of Odoo Community version 15.0 and earlier, as well as Odoo Enterprise version 15.0 and earlier. This issue permits remote attackers to inject malicious web scripts into victim browsers by exploiting crafted content. Such an exploit can lead to the execution of unauthorized scripts, compromising user data and application integrity, making it critical for users to implement proper security measures.

References