PT-2019-12900

Name of the Vulnerable Software and Affected Versions Teclib News plugin for GLPI versions through 1.5.2 Description The issue allows a stored XSS attack via the name parameter in the $ POST request. Recommendations For versions through 1.5.2, as a temporary workaround, consider validating and...