What is GHSA-3v8x-286h-9pxp?

GHSA-3v8x-286h-9pxp is a security advisory published by GitHub Security Advisories with Medium severity. Dolibarr stored cross-site scripting (XSS) vulnerability

Which CVE IDs does GHSA-3v8x-286h-9pxp cover?

GHSA-3v8x-286h-9pxp covers the following CVE IDs: CVE-2018-19995. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-3v8x-286h-9pxp?

GHSA-3v8x-286h-9pxp has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-3v8x-286h-9pxp?

GHSA-3v8x-286h-9pxp affects 1 product, including: composer/dolibarr/dolibarr:\u003c 8.0.4.

GHSA-3v8x-286h-9pxpMediumCVSS 5.4

Dolibarr stored cross-site scripting (XSS) vulnerability

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

April 24, 2024

🔗 CVE IDs covered (1)

CVE-2018-19995 →

📋 Description

A stored cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" (POST) or "town" (POST) parameter to user/card.php.

🎯 Affected products1

composer/dolibarr/dolibarr:< 8.0.4

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2018-19995
https://github.com/Dolibarr/dolibarr/commit/4b8be6ed64763327018ac1c076f81ddffa87855e
https://github.com/Dolibarr/dolibarr/commit/bacd5110fbdc81a35030fdc322775fa15ea85924
https://github.com/advisories/GHSA-3v8x-286h-9pxp