{ "id": "CVE-2024-34051", "sourceIdentifier": "cve@mitre.org", "published": "2024-06-03T20:15:09.100", "lastModified": "2024-06-04T16:57:41.057", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A Reflected Cross-site scripting (XSS) vulnerability located in htdocs/compta/paiement/card.php of Dolibarr before 19.0.2 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the facid parameter." }, { "lang": "es", "value": "Una vulnerabilidad de Cross-site scripting (XSS) Reflejado ubicada en htdocs/compta/paiement/card.php de Dolibarr anterior a 19.0.2 permite a atacantes remotos inyectar script web o HTML arbitrarios a trav\u00e9s de un payload manipulado inyectado en el par\u00e1metro facid." } ], "metrics": {}, "references": [ { "url": "https://blog.smarttecs.com/posts/2024-004-cve-2024-34051/", "source": "cve@mitre.org" } ] }