Description

Dolibarr version 6.0.2 contains a Cross Site Scripting (XSS) vulnerability in Product details that can result in execution of javascript code.

Remediation

References

CVE-2017-1000509

Related Vulnerabilities

WordPress 3.7.x Prototype Pollution (3.7 - 3.7.37)

Drupal Core 8.8.0 Denial of Service (8.8.0)

WordPress Plugin Dynamic Widgets 'id' Parameter Cross-Site Scripting (1.5.1)

Squid Improper Input Validation Vulnerability (CVE-2013-4123)

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2022-31779)

Severity

Medium

Classification

CVE-2017-1000509 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities