CVE-2025-26626
GLPI Inventory Plugin vulnerable to reflective Cross-site Scripting
Summary
GLPI Inventory Plugin vulnerable to reflective Cross-site Scripting
Original description
The description as published by the source.
The GLPI Inventory Plugin handles various types of tasks for GLPI agents for the GLPI asset and IT management software package. Versions prior to 1.5.0 are vulnerable to reflective cross-site scripting, which may lead to executing javascript code. Version 1.5.0 fixes the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com