What is GHSA-4xfw-599q-fmp6?

GHSA-4xfw-599q-fmp6 is a security advisory published by GitHub Security Advisories with Medium severity. Dolibarr stored cross-site scripting (XSS) vulnerability

Which CVE IDs does GHSA-4xfw-599q-fmp6 cover?

GHSA-4xfw-599q-fmp6 covers the following CVE IDs: CVE-2018-19992. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4xfw-599q-fmp6?

GHSA-4xfw-599q-fmp6 has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-4xfw-599q-fmp6?

GHSA-4xfw-599q-fmp6 affects 1 product, including: composer/dolibarr/dolibarr:\u003c 8.0.4.

GHSA-4xfw-599q-fmp6MediumCVSS 5.4

Dolibarr stored cross-site scripting (XSS) vulnerability

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

April 24, 2024

🔗 CVE IDs covered (1)

CVE-2018-19992 →

📋 Description

A stored cross-site scripting (XSS) vulnerability in Dolibarr 8.0.2 allows remote authenticated users to inject arbitrary web script or HTML via the "address" (POST) or "town" (POST) parameter to adherents/type.php.

🎯 Affected products1

composer/dolibarr/dolibarr:< 8.0.4

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2018-19992
https://github.com/Dolibarr/dolibarr/commit/0f06e39d23636bd1e4039ac61a743c79725c798b
https://github.com/advisories/GHSA-4xfw-599q-fmp6