logo

Database

Reflected cross-site scripting (XSS) In dolibarr/dolibarr

Description

Dolibarr Cross-site scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2018-100952. NVD-2018-100953. OSV-2018-100954. GCVE-2018-10095

References

1. https://github.com/Dolibarr/dolibarr/commit/1dc466e1fb687cfe647de4af891720419823ed562. https://github.com/Dolibarr/dolibarr/blob/7.0.2/ChangeLog3. https://sysdream.com/news/lab/2018-05-21-cve-2018-10095-dolibarr-xss-injection-vulnerability4. http://www.openwall.com/lists/oss-security/2018/05/21/35. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10095.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.