Cross-Site Scripting (XSS)

dolibarr/dolibarr is vulnerable to cross-site scripting XSS. The vulnerability exists as it was possible to store XSS payloads in the value of $note in user/note.php. This CVE ID is likely to be the same as CVE-2019-16686...

CVE-2019-17223

There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php...