Lucene search

K
osvGoogleOSV:CVE-2019-16197
HistorySep 16, 2019 - 1:15 p.m.

CVE-2019-16197

2019-09-1613:15:11
Google
osv.dev
3

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

49.6%

In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS.

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

49.6%