CVE-2023-30253

CVE-2023-30253 is a high-severity remote code execution vulnerability affecting Dolibarr ERP/CRM versions prior to 17.0.1. An authenticated attacker can exploit this by manipulating PHP tags (e.g., using <?PHP instead of <?php) in injected data. This vulnerability has a CVSS score of 8.8, indicating high impact on confidentiality, integrity, and availability with low attack complexity. While there is no known active exploitation, public exploit code, or significant community discussion, its high FAUCET Risk Score of 99/100 and high EPSS score suggest a significant potential for future exploitation.