GHSA-9p7q-v9gp-frq4
Dolibarr Cross-site Scripting vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | dolibarr/dolibarr | 10.0.2 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the `admin/mails.php?action=edit` URI via the "Sender email for automatic emails (default value in php.ini: Undefined)" field.
References
External links from the advisory. They lead to third-party sites.