CVE-2019-16688

Dolibarr 9.0.5 has stored XSS in an Email Template section to mails_templates.php

published September 27, 2019

CVSS
—
EPSS
1%
Percentile
55.3
In the wild
Unconfirmed
What it is

Dolibarr 9.0.5 has stored XSS in an Email Template section to mails_templates.php. A user with no privileges can inject script to attack the admin. (This stored XSS can affect all types of user privilege from Admin to users with no permissions.)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00775 · 55.3th percentile
Published
2019-09-27T19:14Z
EPSS history
Timeline
  • 27 SEP 19:14Z
    Dolibarr 9.0.5 has stored XSS in an Email Template section to mails_templates.php
    cvelistv5