CVEs

Advisories and POCs

Dolibarr 14.0.2 XSS to Privilege Escalation CVE-2021-42220

• https://www.exploit-db.com/exploits/50432
• https://packetstormsecurity.com/files/164544/Dolibarr-ERP-CRM-14.0.2-Cross-Site-Scripting-Privilege-Escalation.html
• https://truedigitalsecurity.com/services/penetration-testing-services/advisory-summary-2021-cve-2021-42220

Projeqtor 9.3.1 Stored XSS to Privilege Escalation CVE-2021-42940

• https://truedigitalsecurity.com/services/penetration-testing-services/advisory-summary-2.2022-cve-2021-42940
• https://packetstormsecurity.com/files/165423/Projeqtor-9.3.1-Cross-Site-Scripting.html
• https://www.exploit-db.com/exploits/50641