high8.4
CVE-2026-5385
An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item.
Impact
An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. This issue affects glpi: before 11.0.7.
Affected products
| Product | Affected versions |
|---|---|
| Glpi | before 11.0.7. |
Versions were read from the advisory text. No structured product data has been published for this record yet.