{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"10.0.6"}],"component":"dolibarr/dolibarr","cve_ids":["CVE-2020-7996"],"ecosystem":"Packagist","epss":0.01152,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-v384-jqmq-fc74","id":"tcs_01M5KF8QGNKGJZZ17AWYCQJA8Y","modified_at":"2025-04-03T15:27:04.841487Z","published_at":"2020-01-28T22:26:16Z","references":["https://osv.dev/vulnerability/GHSA-v384-jqmq-fc74","https://nvd.nist.gov/vuln/detail/CVE-2020-7996","https://github.com/Dolibarr/dolibarr","https://github.com/tufangungor/tufangungor.github.io/blob/master/_posts/2020-01-19-dolibarr-10.0.6-xss-in-http-header.md","https://tufangungor.github.io/exploit/2020/01/18/dolibarr-10.0.6-xss-in-http-header.html"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-v384-jqmq-fc74","url":"https://osv.dev/vulnerability/GHSA-v384-jqmq-fc74"}],"summary":"XSS in Dolibarr ERP & CRM"}