Security Advisory
CVE-2016-1912
5.4
MEDIUM
Vulnerability Description
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.8.3 allow remote authenticated users to inject arbitrary web script or HTML via the (1) lastname, (2) firstname, (3) email, (4) job, or (5) signature parameter to htdocs/user/card.php.
Published Date
January 15, 2016
Official Source
NIST NVD Advisory