| Package | Affected versions | Patched versions |
|---|---|---|
| dolibarr/dolibarr | < 18.0.2 | 18.0.2 |
| dolibarr erp/crm | ≤ 18.0.1 |
Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free