CVE-2018-7563

An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preference.php. An attacker is able to create a malicious URL that, if opened by an authenticated user with debug privilege, will execute JavaScript code supplied by the attacker. The...

CVE-2018-7563

An issue was discovered in GLPI through 9.2.1. The application is affected by XSS in the query string to front/preference.php. An attacker is able to create a malicious URL that, if opened by an authenticated user with debug privilege, will execute JavaScript code supplied by the attacker. The...

CVE-2018-7563

CVE-2018-7563 affects GLPI up to version 9.2.1, with an XSS vulnerability in the query string of front/preference.php. An attacker can craft a malicious URL that, when opened by an authenticated user with debug privilege , executes attacker-supplied JavaScript. Impact described includes potential...