CVE-2022-2060 — Cross-site Scripting in Dolibarr

CWE-79 — Cross-site Scripting5 documents4 sources
Severity
5.4MEDIUMNVD
EPSS
0.5%
top 33.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Dolibarr DolibarrDolibarr ERP CRMDolibarr
Timeline
PublishedJun 13
Latest updateJun 14

Description

Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages3 packages

▶Packagistdolibarr/dolibarr< 16.0
▶CVEListV5dolibarr/dolibarr_dolibarrunspecified — 16.0

Patches

Patch: github.com ↗Patch: huntr.dev ↗Patch: github.com ↗

🔴Vulnerability Details

4
GHSA
Cross site scripting in dolibarr↗2022-06-14
▶
OSV
Cross site scripting in dolibarr↗2022-06-14
▶
CVEList
Cross-site Scripting (XSS) - Stored in dolibarr/dolibarr↗2022-06-13
▶
OSV
CVE-2022-2060: Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16↗2022-06-13
▶
CVE-2022-2060 — Cross-site Scripting in Dolibarr | cvebase