CVE-2019-16197

In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to…

published September 16, 2019

CVSS
—
EPSS
3%
Percentile
87.2
In the wild
Unconfirmed
What it is

In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02990 · 87.2th percentile
Published
2019-09-16T12:02Z
EPSS history
Timeline
  • 16 SEP 12:02Z
    In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to…
    cvelistv5