medium6.4
CVE-2025-59712
Snipe-IT allows XSS
Impact
Snipe-IT before 8.1.18 allows XSS.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | snipe/snipe-it | < 8.1.18 | 8.1.18 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Snipeitapp | Snipe-It | before 8.1.18 |