CVE-2018-10095

Fixed upstream EPSS 87%

Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php.

Published 2018-05-22 · CVE record · OSV

Products: dolibarr

Fixed upstream

Ecosystem	Package	Fixed in
Packagist	dolibarr/dolibarr	7.0.2

Distro releases

Release	Package	Fixed in
Ubuntu Pro 16.04 LTS	dolibarr	no fix