CVE-2019-16688

Name of the Vulnerable Software and Affected Versions Dolibarr version 9.0.5

Description The issue concerns a stored XSS in the Email Template section, specifically affecting the mails templates.php file. This allows a user, regardless of their privileges, to inject scripts that can attack the admin, potentially impacting all types of user privileges, from administrators to users with no permissions.

Recommendations For Dolibarr version 9.0.5, consider restricting access to the Email Template section and the mails templates.php file until a fix is available. As a temporary workaround, avoid using the Email Template section to prevent potential script injections.