CVE-2019-16685

Dolibarr 9.0.5 has stored XSS vulnerability via a User Group Description section to card.php

published September 27, 2019

CVSS
—
EPSS
1%
Percentile
55.5
In the wild
Unconfirmed
What it is

Dolibarr 9.0.5 has stored XSS vulnerability via a User Group Description section to card.php. A user with the "Create/modify other users, groups and permissions" privilege can inject script and can also achieve privilege escalation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00782 · 55.5th percentile
Published
2019-09-27T19:05Z
EPSS history
Timeline
  • 27 SEP 19:05Z
    Dolibarr 9.0.5 has stored XSS vulnerability via a User Group Description section to card.php
    cvelistv5