CVE-2020-9016

Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2020-02-16

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Dolibarr Erp/crm (Dolibarr)

References

• https://code610.blogspot.com/2020/02/this-time-i-tried-to-check-one-of.html