Lucene search

K
osvGoogleOSV:GHSA-M44P-CFWJ-WWR6
HistoryMay 24, 2022 - 4:57 p.m.

Dolibarr Cross-site Scripting in a User Note section

2022-05-2416:57:07
Google
osv.dev
2

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

Dolibarr 9.0.5 has stored XSS in a User Note section to note.php. A user with no privileges can inject script to attack the admin.

CPENameOperatorVersion
dolibarr/dolibarreq9.0.5

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%