CVE-2023-4197 (published 2023-11-01T07:58:56.679Z)
Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker to inject and evaluate arbitrary PHP code.
Affected products: Vendor: Dolibarr
Product: Dolibarr ERP CRM
Versions: 0