CVE-2016-7509

2017-07-1913:29:00

Google

osv.dev

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

28.6%

JSON

Cross-site scripting (XSS) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to inject arbitrary web script or HTML by attaching a crafted HTML file to a ticket.

References

github.com/glpi-project/glpi/issues/2483