Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:13427
HistoryMar 08, 2019 - 6:28 a.m.

Cross-Site Scripting (XSS)

2019-03-0806:28:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11

EPSS

0.001

Percentile

37.3%

github.com/Dolibarr/dolibarr is vulnerable to cross-site scripting (XSS). A remote attacker is able to store and inject arbitrary Javascript into a victimm’s browser via the comments and public or private notes, which executes in the context of the user’s browser when the comments or notes are loaded.

EPSS

0.001

Percentile

37.3%