Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the renderexception process. An attacker can execute arbitrary scripts in the context of a staff user's browser by injecting malicious HTML into plugin fields that are later rendered during edit mode exceptio...

GLPI plugin fields: input validation error vulnerability

The Fields GLPI plugin is an open-source plugin developed by GLPI Project Plugins. Versions of the Fields GLPI plugin prior to 1.23.3 had a vulnerability related to input validation errors. This vulnerability stemmed from allowing users who can create drop-down lists to execute arbitrary PHP code...