CVE-2021-3486 GLPi 9.5.4 does not sanitize the metadata

Description

GLPi 9.5.4 does not sanitize the metadata. This way its possible to insert XSS into plugins to execute JavaScript code.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
glpi	Versions non publiées

Autres CVE de glpi

Les 2 CVE de glpi →

CVE-2024-11955 A vulnerability was found in GLPI up to 10.0.17 5.3 Moyenne