Lucene search
+L

1 matches found

OSV
OSV
added 2022/05/24 4:57 p.m.36 views

GHSA-M9Q9-4M25-23GC Dolibarr Cross-site Scripting in a User Profile in a Signature section

Dolibarr 9.0.5 has stored XSS in a User Profile in a Signature section to card.php. A user with the "Create/modify other users, groups and permissions" privilege can inject script and can also achieve privilege escalation...

5.4CVSS5.2AI score0.00782EPSS
SaveExploits1References3
Rows per page
Query Builder