Cross-site Scripting (XSS)

dolibarr/dolibarr is vulnerable to Cross-Site Scripting. The vulnerability is due to a lack of sanitization for the key variable in the topmenu function within main.inc.php. This allows an attacker to insert malicious JavaScript code into the key variable resulting in Cross-Site Scripting...