FFrontAccounting

Products

Exploited and recent CVEs

• CVE-2026-80211 Medium 5.9 FrontAccounting through 2.4.20 Use of Unsalted MD5 for Password Storage 0.3%
• CVE-2026-80210 Medium 6.5 FrontAccounting through 2.4.20 Cross-Site Request Forgery on Financial Transaction Forms 0.2%
• CVE-2026-40521 High 8.8 FrontAccounting < 2.4.20 Path Traversal RCE via attachment upload 1.0%
• CVE-2026-40522 High 7.1 FrontAccounting < 2.4.20 SQL Injection via rep601.php 0.2%
• CVE-2026-40523 High 8.1 FrontAccounting < 2.4.20 SQL Injection via reporting/rep710.php 0.5%
• CVE-2026-40524 High 8.1 FrontAccounting < 2.4.20 SQL Injection via get_gl_transactions() 0.3%