CVE-2021-33618
Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by > and < characters in the onpointermove attribute of a BODY element to the…
published November 10, 2021
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.6th percentile for exploit probability.
What it is
Dolibarr ERP and CRM 13.0.2 allows XSS via object details, as demonstrated by > and < characters in the onpointermove attribute of a BODY element to the user-management feature.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.79282 · 99.6th percentile
- Published
- 2021-11-10T22:40Z
EPSS history
Timeline