CVE-2018-10095

Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter…

published May 22, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.7th percentile for exploit probability.

CVSS
—
EPSS
87%
Percentile
99.7
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.86774 · 99.7th percentile
Published
2018-05-22T20:00Z
EPSS history
Timeline
  • 22 SEP 03:15Z
    EPSS moved 87% → 69%
    epss
  • 06 SEP 03:11Z
    EPSS moved 87% → 69%
    epss
  • 30 AUG 16:00Z
    EPSS moved 69% → 87%
    epss
  • 29 AUG 04:30Z
    EPSS moved 87% → 69%
    epss
  • 22 MAY 20:00Z
    Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter…
    cvelistv5