← All advisories

Medium severity5.4NVD Advisory· Published Sep 27, 2019· Updated Jun 17, 2026

CVE-2019-16686

CVE-2019-16686

Description

Dolibarr 9.0.5 has stored XSS in a User Note section to note.php. A user with no privileges can inject script to attack the admin.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Dolibarr/Dolibarr
cpe:2.3:a:dolibarr:dolibarr_erp\/crm:9.0.5:*:*:*:*:*:*:*
Dolibarr/Dolibarrdescription
ghsa-coords
pkg:composer/dolibarr/dolibarr

Patches

Vulnerability mechanics

References

3

verneet.com/cve-2019-16686nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-m44p-cfwj-wwr6ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-16686ghsaADVISORY

News mentions

0

No linked articles in our index yet.