What is GHSA-8r2w-phx4-mgpv?

GHSA-8r2w-phx4-mgpv is a security advisory published by GitHub Security Advisories with Medium severity. Dolibarr stored Cross-Site Scripting (XSS) vulnerability

Which CVE IDs does GHSA-8r2w-phx4-mgpv cover?

GHSA-8r2w-phx4-mgpv covers the following CVE IDs: CVE-2020-13828. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8r2w-phx4-mgpv?

GHSA-8r2w-phx4-mgpv has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-8r2w-phx4-mgpv?

GHSA-8r2w-phx4-mgpv affects 1 product, including: composer/dolibarr/dolibarr:\u003c= 11.0.4.

GHSA-8r2w-phx4-mgpvMediumCVSS 5.4

Dolibarr stored Cross-Site Scripting (XSS) vulnerability

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

April 24, 2024

🔗 CVE IDs covered (1)

CVE-2020-13828 →

📋 Description

Dolibarr 11.0.4 is affected by multiple stored Cross-Site Scripting (XSS) vulnerabilities that could allow remote authenticated attackers to inject arbitrary web script or HTML via ticket/card.php?action=create with the subject, message, or address parameter; adherents/card.php with the societe or address parameter; product/card.php with the label or customcode parameter; or societe/card.php with the alias or barcode parameter.

🎯 Affected products1

composer/dolibarr/dolibarr:<= 11.0.4

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2020-13828
https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-002
https://github.com/advisories/GHSA-8r2w-phx4-mgpv