Linux Distros Unpatched Vulnerability : CVE-2019-19212

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php product price screen. CVE-2019-19212 Note that Nessus relies on...

Cross-site Scripting (XSS)

Dolibarr/dolibarr is vulnerable to cross-site scripting attack. The vulnerability exists as the value of the qty parameter is not escaped before being displayed on a user's browser in product/fournisseurs.php, allowing an attacker to inject and execute arbitrary Javascript in a user's browser via...