Medium severity6.1NVD Advisory· Published Jul 15, 2019· Updated Jun 17, 2026

CVE-2019-1010016

Description

Dolibarr 6.0.4 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. The attack vector is: Victim must click a specially crafted link sent by the attacker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dolibarr/Dolibarr
cpe:2.3:a:dolibarr:dolibarr_erp\/crm:6.0.4:*:*:*:*:*:*:*
ghsa-coords
pkg:composer/dolibarr/dolibarr
Dolibarr ERP & CRM/Dolibarrv5
Range: 6.0.4

Patches

Vulnerability mechanics

References

github.com/Dolibarr/dolibarr/issues/7962nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-97fp-5m87-r9mfghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-1010016ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000