Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2021-33618 - Vulnerability Database

Dolibarr

Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2021-33618

Medium

Reference: CVE-2021-33618

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-33618

Title: Dolibarr Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Dolibarr ERP and CRM 13.0.2 allows XSS via object details as demonstrated by gt and lt characters in the onpointermove attribute of a BODY element to the user-management feature.