| Package | Affected versions | Patched versions |
|---|---|---|
| dolibarr erp/crm | = 14.0.2 |
Dolibarr ERP-CRM 14.0.2 contains a stored cross-site scripting vulnerability in the ticket creation module that allows low-privilege users to inject malicious scripts. Attackers can craft a specially designed ticket message with embedded JavaScript that triggers when an administrator copies the text, potentially enabling privilege escalation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free