Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2026-5385

GLPI 11.0.0 - Stored XSS in knowledge base

Description

An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. This issue affects glpi: before 11.0.7.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

glpi-project glpi

Default version status: unaffected

  • 0 to < 11.0.7affected

References