CVE-2020-9016 - Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header

MEDIUM

Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header

Published Feb 16, 2020

5.4

MEDIUM

CVSS 3.1

EPSS 0.85%

Dolibarr 11.0 allows XSS via the joinfiles, topic, or code parameter, or the HTTP Referer header.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://code610.blogspot.com/2020/02/this-time-i-tried-to-check-one-of.html		x_refsource_MISCExploitThird Party Advisory
https://github.com/advisories/GHSA-jh69-6vv2-wfp5		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-9016
https://web.archive.org/web/20201203085334/https://therealcoiffeur.github.io/c10001