Medium severity5.4NVD Advisory· Published Sep 27, 2019· Updated Jun 17, 2026

CVE-2019-16687

Description

Dolibarr 9.0.5 has stored XSS in a User Profile in a Signature section to card.php. A user with the "Create/modify other users, groups and permissions" privilege can inject script and can also achieve privilege escalation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dolibarr/Dolibarr
cpe:2.3:a:dolibarr:dolibarr_erp\/crm:9.0.5:*:*:*:*:*:*:*
Dolibarr/Dolibarrdescription
ghsa-coords
pkg:composer/dolibarr/dolibarr

Patches

Vulnerability mechanics

References

verneet.com/cve-2019-16687nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-m9q9-4m25-23gcghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-16687ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000