Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:33358
HistoryDec 16, 2021 - 5:16 a.m.

Cross-site Scripting (XSS)

2021-12-1605:16:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
dolibarr
cross-site scripting
xss
card.php
remote attacker
javascript
software

EPSS

0.001

Percentile

33.0%

dolibarr/dolibarr is vulnerable to cross-site scripting (XSS) attacks. Insufficient checks in card.php allow an remote attacker to insert arbitrary Javascript through the ticket creation flow.

EPSS

0.001

Percentile

33.0%