Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2021-21314

XSS injection on ticket update

Description

GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is an XSS vulnerability involving a logged in user while updating a ticket.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

glpi-project glpi

  • < 9.5.4affected

References