CVE-2019-1010016: Dolibarr Erp/crm

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

Dolibarr 6.0.4 is affected by: Cross Site Scripting (XSS). The impact is: Cookie stealing. The component is: htdocs/product/stats/card.php. The attack vector is: Victim must click a specially crafted link sent by the attacker.

Affected products

• Dolibarr Dolibarr Erp/crm: version 6.0.4 only

Published 2019-07-15. Last modified 2026-06-17.