Vulnerabilities in Dolibarr ERP & CRM

2 results

CVE-2019-1010054—Dolibarr 7.0.0 is affected by: Cross Site Request Forgery (CSRF). The impact is: allow malitious html to change user password, disable usersEPSS 2.2%CVE-2019-1010016—Dolibarr 6.0.4 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. EPSS 1.0%