Server side cross-site scripting In dolibarr/dolibarr
Description
Dolibarr Cross-site Scripting in a User Note section Dolibarr 9.0.5 has stored XSS in a User Note section to note.php. A user with no privileges can inject script to attack the admin.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version |
|---|---|---|
 packagist |
Aliases
1. 2. 3. 4.
References
1.