CVE-2026-25932
GLPI has Stored XSS in Supplier 'Website' field
Résumé
GLPI has Stored XSS in Supplier 'Website' field
Description d'origine
La description telle que publiée par la source (souvent en anglais).
GLPI is a Free Asset and IT Management Software package. From 0.60 to before 10.0.24, an authenticated technician user can store an XSS payload in a supplier fields. This vulnerability is fixed in 10.0.24.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov