Description
Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject.
Remediation
References
Related Vulnerabilities
WordPress 4.8.x Arbitrary File Deletion Vulnerability (4.8 - 4.8.6)
WordPress Plugin Easy Twitter Feed Cross-Site Scripting (1.1)
Oracle Database Server CVE-2011-3511 Vulnerability (CVE-2011-3511)
OpenSSL Use of a Broken or Risky Cryptographic Algorithm Vulnerability (CVE-2018-0735)
WordPress Plugin underConstruction Cross-Site Request Forgery (1.08)