← Database

CVE-2021-42220

MEDIUM CVSS: 5.4 Published: 2021-12-15 Modified: 2026-06-17

Description

A Cross Site Scripting (XSS) vulnerability exists in Dolibarr before 14.0.3 via the ticket creation flow. Exploitation requires that an admin copies the payload into a box.

Affected Platforms

Dolibarr Dolibarr

Weakness Type

CWE-79

References