Lucene search

K
osvGoogleOSV:GHSA-R3R5-FQFM-9WRH
HistoryMay 14, 2022 - 1:27 a.m.

Dolibarr Stored Cross-site Scripting in expensereport/card.php

2022-05-1401:27:14
Google
osv.dev
6
dolibarr
stored cross-site scripting
expensereport plugin

AI Score

6

Confidence

High

EPSS

0.001

Percentile

37.3%

An issue was discovered in Dolibarr through 7.0.0. There is Stored XSS in expensereport/card.php in the expense reports plugin via the comments parameter, or a public or private note.

AI Score

6

Confidence

High

EPSS

0.001

Percentile

37.3%