Dolibarr 9.0.5 has stored XSS in a User Profile in a Signature section to card.php. A user with the \Create/modify other users groups and permissions\ privilege can inject script and can also achieve privilege escalation.