Description

Dolibarr CRM/ERP 10.0.3 allows viewimage.php?file= Stored XSS due to JavaScript execution in an SVG image for a profile picture.

Remediation

References

CVE-2019-19206

Related Vulnerabilities

WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.6)

XWiki CVE-2023-40573 Vulnerability (CVE-2023-40573)

WordPress Plugin eHive Object Details Cross-Site Scripting (2.1.6)

MySQL Improper Input Validation Vulnerability (CVE-2006-4227)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-42629)

Severity

Medium

Classification

CVE-2019-19206 CWE-707 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities