CVE-2020-14475

A reflected cross-site scripting XSS vulnerability in Dolibarr 11.0.3 allows remote attackers to inject arbitrary web script or HTML into public/notice.php related to transphrase and transkey...

CVE-2020-14475

A reflected cross-site scripting XSS vulnerability in Dolibarr 11.0.3 allows remote attackers to inject arbitrary web script or HTML into public/notice.php related to transphrase and transkey...

CVE-2020-14475

Dolibarr ERP/CRM (Dolibarr) is affected by a reflected XSS vulnerability in public/notice.php related to transphrase/transkey. The CVE-2020-14475 entry notes Dolibarr 11.0.3 as vulnerable, with several connected advisories extending to 11.0.4 and below. The underlying issue is input not properly ...