Lucene search
MitreCVELIST:CVE-2019-16687HistorySep 27, 2019 - 7:11 p.m.
CVE-2019-16687
2019-09-2719:11:34
mitre
www.cve.org
0.001 Low
EPSS
Percentile
25.0%
Dolibarr 9.0.5 has stored XSS in a User Profile in a Signature section to card.php. A user with the “Create/modify other users, groups and permissions” privilege can inject script and can also achieve privilege escalation.
References
Related
ubuntucve
ubuntucve
CVE-2019-16687
2019-09-27 00:00:00
cve
cve
CVE-2019-16687
2019-09-27 20:15:10
prion
prion
Privilege escalation
2019-09-27 20:15:00
github
github
Dolibarr Cross-site Scripting in a User Profile in a Signature section
2022-05-24 16:57:07
osv
osv
Dolibarr Cross-site Scripting in a User Profile in a Signature section
2022-05-24 16:57:07
nvd
nvd
CVE-2019-16687
2019-09-27 20:15:10
openvas
openvas
Dolibarr <= 9.0.5 Multiple Vulnerabilities
2019-12-09 00:00:00