Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2017-7887 - Vulnerability Database

Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2017-7887

Medium

Reference: CVE-2017-7887

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-7887

Title: Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Dolibarr ERP/CRM 4.0.4 has XSS in doli/societe/list.php via the sall parameter.