Lucene search

K
osvGoogleOSV:GHSA-JQFP-M5F8-VG28
HistoryDec 16, 2021 - 12:02 a.m.

Dolibarr Cross Site Scripting (XSS) vulnerability

2021-12-1600:02:16
Google
osv.dev
5
dolibarr
xss
vulnerability
ticket creation
exploitation
admin
payload
software

AI Score

6

Confidence

High

EPSS

0.001

Percentile

33.0%

A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admin copies the payload into a box.

AI Score

6

Confidence

High

EPSS

0.001

Percentile

33.0%