Lucene search
Veracode Vulnerability DatabaseVERACODE:31672HistoryAug 16, 2021 - 2:03 a.m.
Cross-site Scripting (XSS)
2021-08-1602:03:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0.001
Percentile
42.8%
dolibarr is vulnerable to cross site scripting (XSS). An attacker is able to exploit the vulnerability by storing malicious scripts in the “Private Note” field at “/adherents/note.php?id=1” endpoint which are executed in a victim’s browser.
Related
cnvd
cnvd
Dolibarr Cross-Site Scripting Vulnerability (CNVD-2021-71264)
2021-08-17 00:00:00
ubuntucve
ubuntucve
CVE-2021-25955
2021-08-15 00:00:00
github
github
Dolibarr Cross-site Scripting vulnerability
2021-08-30 16:22:46
cve
cve
CVE-2021-25955
2021-08-15 21:15:06
osv
osv
Dolibarr Cross-site Scripting vulnerability
2021-08-30 16:22:46
CVE-2021-25955
2021-08-15 21:15:06
nvd
nvd
CVE-2021-25955
2021-08-15 21:15:06
prion
prion
Improper access control
2021-08-15 21:15:00
cvelist
cvelist
CVE-2021-25955 Stored XSS in “Dolibarr” leads to privilege escalation
2021-08-10 00:00:00