Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22532
HistoryFeb 19, 2020 - 8:16 a.m.

Cross-site Scripting (XSS)

2020-02-1908:16:34
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

EPSS

0.001

Percentile

24.8%

dolibarr is vulnerable to cross-site scripting (XSS). The attack exists because it does not properly HTML encoded to sanitize $_SERVER["HTTP_REFERER"] arguments, allowing an attacker to inject and execute malicious script.

EPSS

0.001

Percentile

24.8%