Lucene search

K
osvGoogleOSV:CVE-2021-42220
HistoryDec 15, 2021 - 7:15 a.m.

CVE-2021-42220

2021-12-1507:15:07
Google
osv.dev
12
cve-2021-42220
dolibarr
cross site scripting

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

33.0%

A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admin copies the payload into a box.

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

33.0%