CVE-2022-41941

Description

GLPI is a Free Asset and IT Management Software package. Versions 10.0.0 and above, prior to 10.0.6, are subject to Cross-site Scripting. An administrator may store malicious code in help links. This issue is patched in 10.0.6.

Related CPE's

aglpi-projectglpi********

aglpi-projectglpi********

References

https://github.com/glpi-project/glpi/security/advisories/GHSA-qqqm-7h6v-7cf4

Third Party Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics
Created by Yello
About Severity.io