| Package | Affected versions | Patched versions |
|---|---|---|
| dolibarr/dolibarr | < 16.0 | 16.0 |
| dolibarr erp/crm | < 16.0.0 | 16.0.0 |
A Cross-site Scripting (XSS) vulnerability exists in the admin/accountant.php file. The fields town, name, and Accountant code can be used to escape double quote protection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free