Server side cross-site scripting In dolibarr/dolibarr
Description
Dolibarr ERP and CRM contain XSS Vulnerability Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 packagist | 10.0.3 |
Aliases
1. 2. 3. 4.
References
1. 2.