| Package | Affected versions | Patched versions |
|---|---|---|
| dolibarr/dolibarr | < 11.0.1 | 11.0.1 |
| dolibarr erp/crm | = 10.0.2 |
There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free