CVE-2022-41941
glpi contains XSS Stored inside Standard Interface Help Link href attribute
Summary
glpi contains XSS Stored inside Standard Interface Help Link href attribute
Original description
The description as published by the source.
GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6, are subject to Cross-site Scripting. An administrator may store malicious code in help links. This issue is patched in 10.0.6.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov