← Database

CVE-2024-55228

CRITICAL CVSS: 9.0 Published: 2025-01-27 Modified: 2026-06-17

Description

A cross-site scripting (XSS) vulnerability in the Product module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter.

Affected Platforms

Dolibarr Dolibarr Erp\/Crm

Weakness Type

CWE-79, CWE-79

References