CVE-2019-1010016

2019-07-1502:23:30

dwf

www.cve.org

0.001 Low

EPSS

Percentile

37.2%

JSON

Dolibarr 6.0.4 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. The attack vector is: Victim must click a specially crafted link sent by the attacker.

CNA Affected

[
  {
    "product": "Dolibarr",
    "vendor": "Dolibarr ERP & CRM",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.4"
      }
    ]
  }
]

References

github.com/Dolibarr/dolibarr/issues/7962

0.001 Low

EPSS

Percentile

37.2%

JSON

Related for CVELIST:CVE-2019-1010016