Description
Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php.
Remediation
References
Related Vulnerabilities
Citrix ADC NetScaler Local File Inclusion (CVE-2020-8193)
WordPress Improper Input Validation Vulnerability (CVE-2011-3127)
Internet Information Services Other Vulnerability (CVE-2001-0334)
SugarCRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-35808)
WordPress Plugin Bulk Add to Cart for WooCommerce Security Bypass (1.2.2)