CVE-2018-19799

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM versions 8.0.3 and earlier

Description The issue concerns a XSS vulnerability. It affects the "/exports/export.php" endpoint, specifically the datatoexport parameter.

Recommendations For versions 8.0.3 and earlier, as a temporary workaround, consider restricting access to the /exports/export.php endpoint until a patch is available. Avoid using the datatoexport parameter in the affected endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.