Description
Dolibarr ERP-CRM 14.0.2 contains a stored cross-site scripting vulnerability in the ticket creation module that allows low-privilege users to inject malicious scripts. Attackers can craft a specially designed ticket message with embedded JavaScript that triggers when an administrator copies the text, potentially enabling privilege escalation.
Remediation
References
Related Vulnerabilities
phpMyAdmin CVE-2013-3238 Vulnerability (CVE-2013-3238)
IBMHttpServer Untrusted Pointer Dereference Vulnerability (CVE-2026-8835)
MongoDb Improper Input Validation Vulnerability (CVE-2018-25004)
WebLogic CVE-2020-5421 Vulnerability (CVE-2020-5421)
PHP Resource Management Errors Vulnerability (CVE-2006-1991)