~ / search / GHSA-g5jm-xhwm-9xp9

GHSA-g5jm-xhwm-9xp9

Cross site scripting in dolibarr

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-22293

Packages

EcosystemPackageAffectedFixed in
Packagist dolibarr/dolibarr < 13.0.0 13.0.0

Details

As written in the advisory (Markdown source, shown as plain text).

admin/limits.php in Dolibarr 7.0.2 allows HTML injection, as demonstrated by the MAIN_MAX_DECIMALS_TOT parameter.

References

External links from the advisory. They lead to third-party sites.