CVE-2026-25932 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

GLPI is a Free Asset and IT Management Software package. From 0.60 to before 10.0.24, an authenticated technician user can store an XSS payload in a supplier fi…
High CVSS: 7.2

CVE-2026-25932

GLPI is a Free Asset and IT Management Software package. From 0.60 to before 10.0.24, an authenticated technician user can store an XSS payload in a supplier fields. This vulnerability is fixed in 10.0.24.
Vendor
Glpi-project
Product
Glpi
CWE
CWE-79
Yayın Tarihi
2026-04-06 15:17:06
Güncelleme
2026-04-07 16:04:32
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-79 Glpi HIGH Glpi-project 2026

Referanslar

https://github.com/glpi-project/glpi/security/advisories/GHSA-m627-945g-x7xh