CVSS 9.3 · Reflected XSS (CWE-79), chained to admin creation · Fixed in Dolibarr 24.0.0 Think of a contractor's badge that, when scanned at reception, silently prints a second master key, and the guar
security-research.hashnode.dev7 min readNo responses yet.