Skip to content
OpenAdvisories

Product · Dolibarr

CRM

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.4

    Dolibarr ERP-CRM 14.0.2 - Stored Cross-Site Scripting (XSS) / Privilege Escalation

    Dolibarr ERP-CRM 14.0.2 contains a stored cross-site scripting vulnerability in the ticket creation module that allows low-privilege users to inject malicious scripts. Attackers can craft a specially designed ticket message with embedded JavaScript that trigg…