{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.8.3"}],"component":"dolibarr/dolibarr","cve_ids":["CVE-2016-1912"],"ecosystem":"Packagist","epss":0.01386,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jh5p-wpg2-8rgv","id":"tcs_01M5KF4K7M8656YH9RZ83KC27A","modified_at":"2024-02-16T08:24:16.669893Z","published_at":"2022-05-17T03:59:11Z","references":["https://osv.dev/vulnerability/GHSA-jh5p-wpg2-8rgv","https://nvd.nist.gov/vuln/detail/CVE-2016-1912","https://github.com/Dolibarr/dolibarr/issues/4341","https://github.com/GPCsolutions/dolibarr/commit/0d3181324c816bdf664ca5e1548dfe8eb05c54f8","https://twitter.com/MickaelDorigny/status/684456187870457857","http://packetstormsecurity.com/files/135201/Dolibarr-3.8.3-Cross-Site-Scripting.html","http://www.information-security.fr/xss-dolibarr-version-3-8-3"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-jh5p-wpg2-8rgv","url":"https://osv.dev/vulnerability/GHSA-jh5p-wpg2-8rgv"}],"summary":"Dolibarr ERP and CRM contain XSS Vulnerabilities"}