Security Advisory
CVE-2019-19210
5.4
MEDIUM
Vulnerability Description
Dolibarr ERP/CRM before 10.0.3 allows XSS because uploaded HTML documents are served as text/html despite being renamed to .noexe files.
Published Date
March 16, 2020
Official Source
NIST NVD Advisory