Description

Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall parameter.

Remediation

References

CVE-2017-7887

Related Vulnerabilities

WordPress Plugin Live Chat for Fanpage Cross-Site Scripting (2.0.1)

WordPress Plugin Google Shortlink by BestWebSoft Cross-Site Scripting (1.5.2)

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2022-29905)

WordPress Plugin Traffic Manager Multiple Vulnerabilities (1.4.5)

Oracle Application Server Credentials Management Errors Vulnerability (CVE-2004-1366)

Severity

Medium

Classification

CVE-2017-7887 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities