Lucene search
+L

17 matches found

OSV
OSV
added 2026/04/21 3:32 p.m.6 views

GHSA-676V-WH57-P375 Dolibarr Allows Code Injection through its Website Module

In Dolibarr ERP & CRM = 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters, allowing an authenticated user restricted to HTML/JavaScript editing to inject PHP code through unprotected inputs during website page...

8.8CVSS5.9AI score0.00273EPSS
SaveExploits0References6
Rows per page
Query Builder