Launchpad.net

Launchpad CVE tracker

CVE 2019-19206

Dolibarr CRM/ERP 10.0.3 allows viewimage.php?file= Stored XSS due to JavaScript execution in an SVG image for a profile picture.

See the

CVE page on Mitre.org for more details.

References

MISC: https://medium.com/@k4...
MISC: https://www.dolibarr.o...