CVE-2020-14475: Dolibarr Erp/crm

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A reflected cross-site scripting (XSS) vulnerability in Dolibarr 11.0.3 allows remote attackers to inject arbitrary web script or HTML into public/notice.php (related to transphrase and transkey).

Affected products

• Dolibarr Dolibarr Erp/crm: version 11.0.3 only

Published 2020-06-19. Last modified 2026-06-17.