Description
Cross Site Scripting vulnerability in Dolibarr ERP CRM v.17.0.1 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module, related to analyseVarsForSqlAndScriptsInjection and testSqlAndScriptInject.
Remediation
References
Related Vulnerabilities
WordPress Plugin MoolaMojo Cross-Site Scripting (0.7.4.1)
WordPress Plugin Gravity Forms FreshDesk Cross-Site Scripting (1.2.8)
WordPress Plugin Wise Agent Lead Capture Forms Cross-Site Scripting (1.0)
WordPress Plugin WP Google Maps Cross-Site Request Forgery (7.11.27)
WordPress Plugin Accept Stripe Donation-AidWP Security Bypass (2.8)