Lucene search
GoogleOSV:GHSA-M9Q9-4M25-23GCHistoryMay 24, 2022 - 4:57 p.m.
Dolibarr Cross-site Scripting in a User Profile in a Signature section
2022-05-2416:57:07
Google
osv.dev
1
Dolibarr 9.0.5 has stored XSS in a User Profile in a Signature section to card.php. A user with the “Create/modify other users, groups and permissions” privilege can inject script and can also achieve privilege escalation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolibarr/dolibarr | eq | 9.0.5 |
Related
ubuntucve
ubuntucve
CVE-2019-16687
2019-09-27 00:00:00
cve
cve
CVE-2019-16687
2019-09-27 20:15:10
prion
prion
Privilege escalation
2019-09-27 20:15:00
cvelist
cvelist
CVE-2019-16687
2019-09-27 19:11:34
github
github
Dolibarr Cross-site Scripting in a User Profile in a Signature section
2022-05-24 16:57:07
nvd
nvd
CVE-2019-16687
2019-09-27 20:15:10
openvas
openvas
Dolibarr <= 9.0.5 Multiple Vulnerabilities
2019-12-09 00:00:00