Medium severity5.4NVD Advisory· Published Oct 16, 2019· Updated Jun 17, 2026

CVE-2019-17576

Description

An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the /admin/mails.php?action=edit URI via the "Send all emails to (instead of real recipients, for test purposes)" field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dolibarr/Dolibarr
cpe:2.3:a:dolibarr:dolibarr_erp\/crm:10.0.2:*:*:*:*:*:*:*
Dolibarr/Dolibarrdescription
ghsa-coords
pkg:composer/dolibarr/dolibarr

Patches

Vulnerability mechanics

References

mycvee.blogspot.com/p/blog-page.htmlnvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-rr5g-rc28-wxwjghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-17576ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000