{"id":"CVE-2024-55227","aliases":["BIT-dolibarr-2024-55227","GHSA-2v3r-gvq5-qqgh"],"url":"https://o3.security/vulnerability/CVE-2024-55227","summary":"Dolibarr Cross-site Scripting vulnerability","details":"A cross-site scripting (XSS) vulnerability in the Events/Agenda module of Dolibarr v21.0.0-beta allows attackers to execute arbitrary web scripts or HTMl via a crafted payload injected into the Title parameter.","published":"2025-01-27T00:00:00Z","modified":"2026-08-12T03:51:21.132695927Z","cvss":{"score":9,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"dolibarr/dolibarr","fixedVersion":null}],"fix":{"url":"https://github.com/Dolibarr/dolibarr/commit/56710ce9b79a97df093f586c90bdaf6cce6a5808","label":"Dolibarr/dolibarr@56710ce"},"references":[{"type":"WEB","url":"https://gist.github.com/Dqtdqt/9762466cd6ec541ea265ba33b09489ff"},{"type":"WEB","url":"https://github.com/Dolibarr/dolibarr/security/policy"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/55xxx/CVE-2024-55227.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-55227"},{"type":"FIX","url":"https://github.com/Dolibarr/dolibarr/commit/56710ce9b79a97df093f586c90bdaf6cce6a5808"},{"type":"FIX","url":"https://github.com/Dolibarr/dolibarr/commit/9aa24d9d9aeab36358c725dae3fe20c9631082e7"},{"type":"FIX","url":"https://github.com/Dolibarr/dolibarr/commit/c0250e4c9106b5c889e512a4771f0205d4f99b99"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-12T03:51:21.132695927Z"}}