PT-2026-98143

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.7.0 Description A user with the customfields.create permission can store malicious markup in the CustomField.name variable. The app/Presenters/AssetPresenter.php file assigns this value as an unescaped...