CVE-2024-55228
CVSS 3.1 Score 9 of 10 (high)
Details
Summary
CVE-2024-55228 is a newly discovered cross-site scripting (XSS) vulnerability that affects the Product module in Dolibarr v21.0.0-beta. This issue permits attackers to inject arbitrary web scripts or HTML into the Title parameter, potentially allowing them to steal user data or take control of user sessions. By exploiting this vulnerability, attackers can execute malicious code in the context of the affected website, posing a significant security risk to users. It is essential that users upgrade to a patched version of Dolibarr as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Dolibarr
Affected Vendors
- Dolibarr