Lucene search

K
githubGitHub Advisory DatabaseGHSA-H3VG-4X76-V28W
HistoryMay 17, 2022 - 1:05 a.m.

Dolibarr ERP and CRM contain XSS Vulnerability

2022-05-1701:05:38
CWE-79
GitHub Advisory Database
github.com
4

0.001 Low

EPSS

Percentile

28.4%

Cross-site scripting (XSS) vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php.

CPENameOperatorVersion
dolibarr/dolibarrlt6.0.1

0.001 Low

EPSS

Percentile

28.4%