Description

Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr 3.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) the username parameter in a setup action to admin/company.php, or the PATH_INFO to (2) admin/security_other.php, (3) admin/events.php, or (4) admin/user.php.

Remediation

References

CVE-2011-4329

Related Vulnerabilities

WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Cross-Site Scripting (2.3.7)

WordPress Plugin Hunk External Links Cross-Site Scripting (3.0.5)

Ruby Inadequate Encryption Strength Vulnerability (CVE-2011-4121)

WordPress Plugin Custom Login Page Customizer-LoginPress Unspecified Vulnerability (1.1.15)

WordPress Plugin DeMomentSomTres Subscribe Cross-Site Scripting (201909190900)

Severity

Medium

Classification

CVE-2011-4329 CWE-707

Tags

Missing Update Known Vulnerabilities