Reflected cross-site scripting (XSS) In dolibarr/dolibarr
Description
Dolibarr ERP and CRM contain XSS Vulnerability The test_sql_and_script_inject function in htdocs/main.inc.php in Dolibarr ERP/CRM 6.0.4 blocks some event attributes but neither onclick nor onscroll, which allows XSS.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 packagist | 6.0.5 |
Aliases
1. 2. 3. 4.
References
1. 2.