CVE-2021-42220

A Cross Site Scripting XSS vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admin copies the payload into a box...

CVE-2021-42220

A Cross Site Scripting XSS vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admin copies the payload into a box...

CVE-2021-42220

Dolibarr prior to 14.0.3 contains a Cross-Site Scripting (XSS) vulnerability exposed via the ticket creation flow. Exploitation requires an admin to copy the payload into a box, enabling client-side script execution as described in multiple sources. The issue is addressed in Dolibarr 14.0.3 (fix/...