{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"11.0.4"}],"component":"dolibarr/dolibarr","cve_ids":["CVE-2020-13828"],"ecosystem":"Packagist","epss":0.00832,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-8r2w-phx4-mgpv","id":"tcs_01M5KEZ958CV766KQASW1VVTGJ","modified_at":"2025-04-03T15:27:09.695913Z","published_at":"2022-05-24T17:26:59Z","references":["https://osv.dev/vulnerability/GHSA-8r2w-phx4-mgpv","https://nvd.nist.gov/vuln/detail/CVE-2020-13828","https://github.com/Dolibarr/dolibarr","https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-002"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-8r2w-phx4-mgpv","url":"https://osv.dev/vulnerability/GHSA-8r2w-phx4-mgpv"}],"summary":"Dolibarr stored Cross-Site Scripting (XSS) vulnerability"}