CVE-2026-25932
GLPI has Stored XSS in Supplier 'Website' field
Summary
GLPI has Stored XSS in Supplier 'Website' field
Original description
The description as published by the source.
GLPI is a Free Asset and IT Management Software package. From 0.60 to before 10.0.24, an authenticated technician user can store an XSS payload in a supplier fields. This vulnerability is fixed in 10.0.24.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov