CVE-2024-47759 — GLPI has a stored XSS via document upload
GLPI is a free Asset and IT management software package. An technician can upload a SVG containing a malicious script. The script will then be executed when any user will try to…
Published: 2024-11-15 · CVSS: 6.7 · CVSS 4.0
GLPI is a free Asset and IT management software package. An technician can upload a SVG containing a malicious script. The script will then be executed when any user will try to see the document contents. Upgrade to 10.0.17.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7