CVE-2025-47932

Combodo iTop (web-based IT service management) is affected. Affected versions prior to 2.7.13 and 3.2.2 are vulnerable to cross-site scripting when rendering dashboards via AJAX. Root cause: insufficient sanitization of the variable used during the dashboard render. The issue is addressed in vers...