Candidate: CVE-2013-2092 PublicDate: 2019-11-20 21:15:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2092 Description: Cross-site Scripting (XSS) in Dolibarr ERP/CRM 3.3.1 allows remote attackers to inject arbitrary web script or HTML in functions.lib.php. Ubuntu-Description: Notes: Mitigation: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N [6.1 MEDIUM] Patches_dolibarr: upstream_dolibarr: released (3.3.4-1) precise/esm_dolibarr: DNE trusty_dolibarr: ignored (out of standard support) trusty/esm_dolibarr: DNE xenial_dolibarr: not-affected (3.5.8+dfsg1-1ubuntu1) bionic_dolibarr: DNE focal_dolibarr: DNE devel_dolibarr: DNE