Medium severity5.4NVD Advisory· Published Sep 27, 2019· Updated Jun 17, 2026

CVE-2019-16688

Description

Dolibarr 9.0.5 has stored XSS in an Email Template section to mails_templates.php. A user with no privileges can inject script to attack the admin. (This stored XSS can affect all types of user privilege from Admin to users with no permissions.)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dolibarr/Dolibarr
cpe:2.3:a:dolibarr:dolibarr_erp\/crm:9.0.5:*:*:*:*:*:*:*
Dolibarr/Dolibarrdescription
ghsa-coords
pkg:composer/dolibarr/dolibarr

Patches

Vulnerability mechanics

References

verneet.com/cve-2019-16688nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-9h46-g4c9-7976ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-16688ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000