Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Dolibarr Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2026-31018 - Vulnerability Database
Dolibarr

Dolibarr Improper Control of Generation of Code (Code Injection) Vulnerability - CVE-2026-31018

High
Reference: CVE-2026-31018
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2026-31018
Title: Dolibarr Improper Control of Generation of Code (Code Injection) Vulnerability
Overview:

In Dolibarr ERP amp CRM lt 22.0.4 PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters allowing an authenticated user restricted to HTML/JavaScript editing to inject PHP code through unprotected inputs during website page creation.