← All advisories

Medium severity6.1NVD Advisory· Published Oct 15, 2019· Updated Jun 17, 2026

CVE-2019-17223

CVE-2019-17223

Description

There is HTML Injection in the Note field in Dolibarr ERP/CRM 10.0.2 via user/note.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
dolibarr/dolibarrPackagist	< 11.0.1	11.0.1

Affected products

3

Dolibarr/Dolibarr
cpe:2.3:a:dolibarr:dolibarr_erp\/crm:10.0.2:*:*:*:*:*:*:*
Dolibarr/Dolibarr ERP/CRMdescription
ghsa-coords
pkg:composer/dolibarr/dolibarr
Range: < 11.0.1

Patches

Vulnerability mechanics

References

7

github.com/advisories/GHSA-3264-65pg-5xm4ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-17223ghsaADVISORY
www.dolibarr.org/forum/dolibarr-changelogsnvdRelease NotesVendor Advisory
github.com/Dolibarr/dolibarr/commit/c7736dde41826ac6eca3e838e57eab2f0304e256ghsaWEB
medium.com/@k43p/cve-2019-17223-stored-html-injection-dolibarr-crm-erp-ad1e064d0ca5ghsaWEB
security.snyk.io/vuln/SNYK-PHP-DOLIBARRDOLIBARR-473217ghsaWEB
medium.com/%40k43p/cve-2019-17223-stored-html-injection-dolibarr-crm-erp-ad1e064d0ca5nvd

News mentions

0

No linked articles in our index yet.