{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"11.0.0"}],"component":"dolibarr/dolibarr","cve_ids":["CVE-2020-9016"],"ecosystem":"Packagist","epss":0.00851,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jh69-6vv2-wfp5","id":"tcs_01M5KF4KRB89R6MYRXR8W7P98N","modified_at":"2025-04-03T15:27:14.083746Z","published_at":"2022-05-24T17:09:07Z","references":["https://osv.dev/vulnerability/GHSA-jh69-6vv2-wfp5","https://nvd.nist.gov/vuln/detail/CVE-2020-9016","https://code610.blogspot.com/2020/02/this-time-i-tried-to-check-one-of.html","https://web.archive.org/web/20201203085334/https://therealcoiffeur.github.io/c10001"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-jh69-6vv2-wfp5","url":"https://osv.dev/vulnerability/GHSA-jh69-6vv2-wfp5"}],"summary":"Dolibarr ERP and CRM contain XSS Vulnerability"}