CVE-2024-55227

Summary

CVE-2024-55227 is a newly disclosed cross-site scripting (XSS) vulnerability that affects the Events/Agenda module in Dolibarr v21.0.0-beta. This issue enables attackers to inject arbitrary web scripts or HTML into the Title parameter, potentially leading to code execution and session hijacking. Successful exploitation could result in unauthorized access to user data or unintended system actions. Users are strongly advised to upgrade to a patched version of Dolibarr as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.