CVE-2020-13094

Dolibarr before 11.0.4 allows XSS...

Dolibarr Persistent Cross Site Scripting (CVE-2020-13094)

A persistent cross site scripting vulnerability exists in Dolibarr. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary web script into the affected system...

Dolibarr 11.0.3 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Title: Dolibarr 11.0.3 Authenticated Cross Site Scripting Bug: XSS - Cross Site Scripting CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-13094 Exploit-DB Author ID: 8763 Remotely Exploitable: Yes Dynamic Coding Language: PHP CVSS...

CVE-2020-13094

Dolibarr ERP/CRM versions prior to 11.0.4 are affected by CVE-2020-13094 due to a cross-site scripting (XSS) vulnerability in the web UI. The issue stems from insufficient input validation, enabling an attacker to inject client-side scripts. Documented exploitation exists (e.g., remote via LDAP s...