{"action":"Upgrade dolibarr/dolibarr to 10.0.2 or later.","affected":[{"fixed":"10.0.2","introduced":"0"}],"component":"dolibarr/dolibarr","cve_ids":["CVE-2019-16197"],"ecosystem":"Packagist","epss":0.0299,"exploited":false,"fixed_versions":["10.0.2"],"ghsa_id":"GHSA-m553-9wmx-533h","id":"tcs_01M5KF557S6HS8N8899HQ1KYVR","modified_at":"2023-11-08T04:01:16.890380Z","published_at":"2019-11-08T20:05:31Z","references":["https://osv.dev/vulnerability/GHSA-m553-9wmx-533h","https://nvd.nist.gov/vuln/detail/CVE-2019-16197","https://github.com/Dolibarr/dolibarr/commit/c53be23122fc6e7c3c8d65ee8ba979c566380964","https://github.com/Dolibarr/dolibarr","http://packetstormsecurity.com/files/154481/Dolibarr-ERP-CRM-10.0.1-Cross-Site-Scripting.html"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-m553-9wmx-533h","url":"https://osv.dev/vulnerability/GHSA-m553-9wmx-533h"}],"summary":"Cross-site scripting in Dolibarr"}