CVE-2021-3486 GLPi 9.5.4 does not sanitize the metadata

Description

GLPi 9.5.4 does not sanitize the metadata. This way its possible to insert XSS into plugins to execute JavaScript code.

Affected products and versions

Product	Affected versions	Fixed in
glpi	Versions not published

Other CVEs of glpi

The 2 CVEs of glpi →

CVE-2024-11955 A vulnerability was found in GLPI up to 10.0.17 5.3 Medium