Dolibarr-17.0.0-Exploit-CVE-2023-30253 In Dolibarr 17.0.0 with the CMS Website plugin (core) enabled, an authenticated attacker can obtain remote command execution via php code injection bypassing the application restrictions. Maintained by dollarboysushil on GitHub, where it has earned 9 stars from the community.