Lucene search
GoogleOSV:GHSA-9H46-G4C9-7976HistoryMay 24, 2022 - 4:57 p.m.
Dolibarr stored Cross-site Scripting in an Email Template section
2022-05-2416:57:07
Google
osv.dev
7
Dolibarr 9.0.5 has stored XSS in an Email Template section to mails_templates.php. A user with no privileges can inject script to attack the admin. (This stored XSS can affect all types of user privilege from Admin to users with no permissions.)
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolibarr/dolibarr | eq | 9.0.5 |
Related
nvd
nvd
CVE-2019-16688
2019-09-27 20:15:10
github
github
Dolibarr stored Cross-site Scripting in an Email Template section
2022-05-24 16:57:07
veracode
veracode
Cross-Site Scripting (XSS)
2019-10-01 04:34:38
prion
prion
Cross site scripting
2019-09-27 20:15:00
ubuntucve
ubuntucve
CVE-2019-16688
2019-09-27 00:00:00
cvelist
cvelist
CVE-2019-16688
2019-09-27 19:14:27
cve
cve
CVE-2019-16688
2019-09-27 20:15:10
openvas
openvas
Dolibarr <= 9.0.5 Multiple Vulnerabilities
2019-12-09 00:00:00