description: Cross-site Scripting (XSS) in Dolibarr ERP/CRM 3.3.1 allows remote attackers to inject arbitrary web script or HTML in functions.lib.php.
problem types: Cross-Site Scripting
affected:
{
product: dolibarr
vendor: dolibarr
versions:
status: affected, version: 3.3.4-1
}