[HIGH] Dolibarr has SQL Injection in societe/class/societe.class.php via localtax1_value parameter

PKSA-w1dm-r75t-7cq5 CVE-2026-33944 GHSA-v5fq-cf5m-vwv7

Affected package: dolibarr/dolibarr

Affected version: >=23.0.0,<23.0.2|<22.0.5

Reported by:
GitHub