CVE-2019-17576

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p55

Published

Oct 16, 2019 (Oct 16, 2019)

Modified

Jun 17, 2026

Description

An issue was discovered in Dolibarr 10.0.2. It has XSS via the "outgoing email setup" feature in the /admin/mails.php?action=edit URI via the "Send all emails to (instead of real recipients, for test purposes)" field.

Vendors: dolibarr
Products: dolibarr erp\/crm
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.