Lucene search

K
osvGoogleOSV:GHSA-FC6H-769X-GFF5
HistoryMay 24, 2022 - 7:20 p.m.

Dolibarr ERP and CRM contain XSS Vulnerability

2022-05-2419:20:28
Google
osv.dev
6
dolibarr
erp
crm
xss
vulnerability
user-management

EPSS

0.001

Percentile

50.1%

Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by > and < characters in the onpointermove attribute of a BODY element to the user-management feature.

EPSS

0.001

Percentile

50.1%