CVE-2019-19211
Dolibarr ERP/CRM before 10.0.3 has an Insufficient Filtering issue that can lead to user/card.php XSS.
Date published : 2020-03-16
https://herolab.usd.de/en/security-advisories/
https://herolab.usd.de/en/security-advisories/usd-2019-0053/