~ / search / GHSA-3v8x-286h-9pxp

GHSA-3v8x-286h-9pxp

Dolibarr stored cross-site scripting (XSS) vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-19995

Packages

EcosystemPackageAffectedFixed in
Packagist dolibarr/dolibarr < 8.0.4 8.0.4

Details

As written in the advisory (Markdown source, shown as plain text).

A stored cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" (POST) or "town" (POST) parameter to user/card.php.

References

External links from the advisory. They lead to third-party sites.