Lucene search

K
osvGoogleOSV:GHSA-8R2W-PHX4-MGPV
HistoryMay 24, 2022 - 5:26 p.m.

Dolibarr stored Cross-Site Scripting (XSS) vulnerability

2022-05-2417:26:59
Google
osv.dev
12
dolibarr
stored xss
vulnerabilities
remote attackers
web script
html
parameters

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

29.2%

Dolibarr 11.0.4 is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities that could allow remote authenticated attackers to inject arbitrary web script or HTML via ticket/card.php?action=create with the subject, message, or address parameter; adherents/card.php with the societe or address parameter; product/card.php with the label or customcode parameter; or societe/card.php with the alias or barcode parameter.

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

29.2%

Related for OSV:GHSA-8R2W-PHX4-MGPV