CVE-2019-19212

No fix known EPSS 4%

Dolibarr ERP/CRM 3.0 through 10.0.3 allows XSS via the qty parameter to product/fournisseurs.php (product price screen).

Published 2020-03-16 · CVE record · OSV

Products: dolibarr

Affected upstream, no fix yet

Ecosystem	Package
Packagist	dolibarr/dolibarr

Release	Package	Fixed in
Ubuntu Pro 16.04 LTS	dolibarr	no fix