What’s Vulnerable › Vulnerabilities

CVE-2019-19206

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-11-26 · updated 2026-06-17
• Weakness: CWE-79

Description

Dolibarr CRM/ERP 10.0.3 allows viewimage.php?file= Stored XSS due to JavaScript execution in an SVG image for a profile picture.

Affected products

• dolibarr: 10.0.3

References

• https://medium.com/%40k43p/cve-2019-19206-stored-xss-due-to-javascript-execution-in-an-svg-file-ee1d038fba76
• https://www.dolibarr.org/forum/dolibarr-changelogs
• https://medium.com/%40k43p/cve-2019-19206-stored-xss-due-to-javascript-execution-in-an-svg-file-ee1d038fba76
• https://www.dolibarr.org/forum/dolibarr-changelogs

Get alerted when CVE-2019-19206 or the next vulnerability affects your stack