-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability chain requires two key flaws: 1) Unsanitized input handling in link label updates (alpha filter allows some special characters), and 2) Unsafe output rendering of stored labels. The patch specifically addresses these by changing to 'alphanohtml' filtering and adding HTML escaping. These functions directly correspond to the attack vector described - storing malicious IFRAME via label input and executing it when viewed.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| dolibarr/dolibarr | composer | >= 10.0, < 10.0.2 | 10.0.2 |
PHPPHPKEV Misses 88% of Exploited CVEs- Get the report