| Package | Affected versions | Patched versions |
|---|---|---|
| dolibarr/dolibarr | < 10.0.2 | 10.0.2 |
| dolibarr erp/crm | = 10.0.1 |
In htdocs/societe/card.php in Dolibarr 10.0.1, the value of the User-Agent HTTP header is copied into the HTML document as plain text between tags, leading to XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free