Medium severity6.1NVD Advisory· Published May 22, 2018· Updated Jun 17, 2026
CVE-2018-10095
CVE-2018-10095
Description
Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
dolibarr/dolibarrPackagist | < 7.0.2 | 7.0.2 |
Affected products
2Patches
Vulnerability mechanics
References
7- github.com/Dolibarr/dolibarr/commit/1dc466e1fb687cfe647de4af891720419823ed56nvdIssue TrackingPatchVendor AdvisoryWEB
- github.com/Dolibarr/dolibarr/blob/7.0.2/ChangeLognvdIssue TrackingVendor AdvisoryWEB
- github.com/advisories/GHSA-p2fm-8rhj-58frghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2018-10095ghsaADVISORY
- sysdream.com/news/lab/2018-05-21-cve-2018-10095-dolibarr-xss-injection-vulnerability/nvdThird Party Advisory
- www.openwall.com/lists/oss-security/2018/05/21/3nvdMailing ListWEB
- sysdream.com/news/lab/2018-05-21-cve-2018-10095-dolibarr-xss-injection-vulnerabilityghsaWEB
News mentions
0No linked articles in our index yet.