Lucene search
PRIOn knowledge basePRION:CVE-2020-13239HistoryMay 20, 2020 - 3:15 p.m.
Cross site scripting
2020-05-2015:15:00
PRIOn knowledge base
www.prio-n.com
4
The DMS/ECM module in Dolibarr 11.0.4 renders user-uploaded .html files in the browser when the attachment parameter is removed from the direct download link. This causes XSS.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolibarr_erp\\/crm | eq | 11.0.4 |
Related
nvd
nvd
CVE-2020-13239
2020-05-20 15:15:11
veracode
veracode
Cross-Site Scripting (XSS)
2020-05-21 04:57:38
github
github
Dolibarr Stored Cross-site Scripting via file upload
2022-05-24 17:18:12
cve
cve
CVE-2020-13239
2020-05-20 15:15:11
osv
osv
CVE-2020-13239
2020-05-20 15:15:11
Dolibarr Stored Cross-site Scripting via file upload
2022-05-24 17:18:12
ubuntucve
ubuntucve
CVE-2020-13239
2020-05-20 00:00:00
cvelist
cvelist
CVE-2020-13239
2020-05-20 14:57:38