CVE-2019-19206

Publication date

2019-11-26 14:18:39

Family

mitre

State

PUBLISHED

Description

Dolibarr CRM/ERP 10.0.3 allows viewimage.php?file= Stored XSS due to JavaScript execution in an SVG image for a profile picture.