CVE-2017-14241

Fixed upstream EPSS <1%

Cross-site scripting (XSS) vulnerability in Dolibarr ERP/CRM 6.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the Title parameter to htdocs/admin/menus/edit.php.

Published 2017-09-11 · CVE record · OSV

Products: dolibarr

Fixed upstream

Ecosystem	Package	Fixed in
Packagist	dolibarr/dolibarr	6.0.1

Distro releases

Release	Package	Fixed in
Ubuntu Pro 16.04 LTS	dolibarr	no fix