Lucene search

K
osvGoogleOSV:GHSA-97FP-5M87-R9MF
HistoryMay 24, 2022 - 4:50 p.m.

Dolibarr Cross Site Scripting (XSS)

2022-05-2416:50:15
Google
osv.dev
3
dolibarr
cross site scripting
cookie stealing
htdocs
card.php
victim
attacker
link sent

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

37.3%

Dolibarr 6.0.4 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. The attack vector is: Victim must click a specially crafted link sent by the attacker.

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

37.3%

Related for OSV:GHSA-97FP-5M87-R9MF