What is GHSA-pm57-926c-28mr?

GHSA-pm57-926c-28mr is a security advisory published by GitHub Security Advisories with Critical severity. Dolibarr Cross-site Scripting via the qty parameter in product/fournisseurs.php

Which CVE IDs does GHSA-pm57-926c-28mr cover?

GHSA-pm57-926c-28mr covers the following CVE IDs: CVE-2019-19212. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pm57-926c-28mr?

GHSA-pm57-926c-28mr has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-pm57-926c-28mr?

GHSA-pm57-926c-28mr affects 1 product, including: composer/dolibarr/dolibarr:\u003e= 3.0, \u003c= 10.0.3.

GHSA-pm57-926c-28mrCriticalCVSS 9.8

Dolibarr Cross-site Scripting via the qty parameter in product/fournisseurs.php

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

April 24, 2024

🔗 CVE IDs covered (1)

CVE-2019-19212 →

📋 Description

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php (product price screen).

🎯 Affected products1

composer/dolibarr/dolibarr:>= 3.0, <= 10.0.3

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2019-19212
https://www.dolibarr.org/forum/dolibarr-changelogs
https://herolab.usd.de/en/security-advisories
https://herolab.usd.de/security-advisories/usd-2019-0054
https://github.com/advisories/GHSA-pm57-926c-28mr