CVE-2024-55228: Dolibarr Erp/crm

Critical severity, CVSS 9.0. EPSS: 0.7% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability in the Product module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter.

Affected products

• Dolibarr Dolibarr Erp/crm: version 21.0.0 only

Published 2025-01-27. Last modified 2026-06-17.