Lucene search
PRIOn knowledge basePRION:CVE-2019-16688HistorySep 27, 2019 - 8:15 p.m.
Cross site scripting
2019-09-2720:15:00
PRIOn knowledge base
www.prio-n.com
3
Dolibarr 9.0.5 has stored XSS in an Email Template section to mails_templates.php. A user with no privileges can inject script to attack the admin. (This stored XSS can affect all types of user privilege from Admin to users with no permissions.)
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolibarr_erp\\/crm | eq | 9.0.5 |
References
Related
nvd
nvd
CVE-2019-16688
2019-09-27 20:15:10
osv
osv
Dolibarr stored Cross-site Scripting in an Email Template section
2022-05-24 16:57:07
veracode
veracode
Cross-Site Scripting (XSS)
2019-10-01 04:34:38
github
github
Dolibarr stored Cross-site Scripting in an Email Template section
2022-05-24 16:57:07
ubuntucve
ubuntucve
CVE-2019-16688
2019-09-27 00:00:00
cvelist
cvelist
CVE-2019-16688
2019-09-27 19:14:27
cve
cve
CVE-2019-16688
2019-09-27 20:15:10
openvas
openvas
Dolibarr <= 9.0.5 Multiple Vulnerabilities
2019-12-09 00:00:00