CVE-2019-12724

An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI. It allows a stored XSS attack via the $POST'name' parameter...

EUVD-2019-4315

Malware in sbrugna...

CVE-2019-12724

An issue was discovered in the Teclib News plugin through 1.5.2 for GLPI. It allows a stored XSS attack via the $POST'name' parameter...

PT-2019-12900

Name of the Vulnerable Software and Affected Versions Teclib News plugin for GLPI versions through 1.5.2 Description The issue allows a stored XSS attack via the name parameter in the $ POST request. Recommendations For versions through 1.5.2, as a temporary workaround, consider validating and...