Dolibarr ERP and CRM contain XSS Vulnerabilities

Description

References

• nvd.nist.gov/vuln/detail/CVE-2016-1912 · ADVISORY
• Dolibarr/dolibarr · WEB
• GPCsolutions/dolibarr commit 0d31813 · WEB
• twitter.com/MickaelDorigny/status/684456187870457857 · WEB
• packetstormsecurity.com/files/135201/Dolibarr-3.8.3-Cross-Site-Scripting.html · WEB
• information-security.fr/xss-dolibarr-version-3-8-3 · WEB
• information-security.fr/xss-dolibarr-version-3-8-3 · Exploit

Weitere Schwachstellen in dolibarr/dolibarr

• CVE-2026-33944HOCH 8.8Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter
• CVE-2026-10215MITTEL 4.3A security vulnerability has been detected in Dolibarr ERP CRM up to 23.0.1. Impacted is the function checkUserAccessToObject of the file ht…
• CVE-2018-25357KRITISCH 9.8Dolibarr ERP CRM 7.0.3 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary code by inj…
• CVE-2026-7689NIEDRIG 3.7A security flaw has been discovered in Dolibarr ERP CRM up to 23.0.2. This vulnerability affects the function dol_verifyHash in the library …
• CVE-2026-7688MITTEL 5.0A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2. This affects the function _checkValForAPI of the file htdocs/expedition/cla…