Vulnerabilities > Dolibarr > Dolibarr ERP CRM > 9.0.5

DATE CVE VULNERABILITY TITLE RISK
2019-09-27 CVE-2019-16687 Cross-site Scripting vulnerability in Dolibarr Erp/Crm 9.0.5
Dolibarr 9.0.5 has stored XSS in a User Profile in a Signature section to card.php.
network
low complexity
dolibarr CWE-79
5.4
2019-09-27 CVE-2019-16686 Cross-site Scripting vulnerability in Dolibarr Erp/Crm 9.0.5
Dolibarr 9.0.5 has stored XSS in a User Note section to note.php.
network
low complexity
dolibarr CWE-79
5.4
2019-09-27 CVE-2019-16685 Cross-site Scripting vulnerability in Dolibarr Erp/Crm 9.0.5
Dolibarr 9.0.5 has stored XSS vulnerability via a User Group Description section to card.php.
network
low complexity
dolibarr CWE-79
5.4