← All advisories

Medium severity5.4NVD Advisory· Published Jun 13, 2022· Updated Jun 17, 2026

CVE-2022-2060

CVE-2022-2060

Description

Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
dolibarr/dolibarrPackagist	< 16.0	16.0

Affected products

4

ghsa-coords2 versions
pkg:composer/dolibarr/dolibarr pkg:bitnami/dolibarr
< 16.0+ 1 more
- (no CPE)range: < 16.0
- (no CPE)range: < 16.0.0
Dolibarr/Dolibarr2 versions
cpe:2.3:a:dolibarr:dolibarr_erp\/crm:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:dolibarr:dolibarr_erp\/crm:*:*:*:*:*:*:*:*range: <16.0.0
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

4

github.com/dolibarr/dolibarr/commit/2b5b9957c3010a5db9d1988c2efe5b209b16b47fnvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/2acfc8fe-247c-4f88-aeaa-042b6b8690a0nvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-8fvr-7945-mg7wghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-2060ghsaADVISORY

News mentions

0

No linked articles in our index yet.