← Database

CVE-2022-21719

MEDIUM CVSS: 6.1 Published: 2022-01-28 Modified: 2026-06-17

Description

GLPI is a free asset and IT management software package. All GLPI versions prior to 9.5.7 are vulnerable to reflected cross-site scripting. Version 9.5.7 contains a patch for this issue. There are no known workarounds.

Affected Platforms

Glpi-Project Glpi

Weakness Type

CWE-79, CWE-79

References