EUVD-2019-4746

Malware in sbrugna...

CVE-2019-13239

inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...

CVE-2019-13239: Improper Neutralization of Input During Web Page Generation

inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture...

PT-2019-13201

Name of the Vulnerable Software and Affected Versions GLPI versions prior to 9.4.3 Description The issue allows for XSS via a user picture in the inc/user.class.php file. Recommendations For versions prior to 9.4.3, update to version 9.4.3 or later to resolve the issue...