| Package | Affected versions | Patched versions |
|---|---|---|
| glpi | ≥ 0.68.1, < 9.4.6 | 9.4.6 |
In GLPI after 0.68.1 and before 9.4.6, multiple reflexive XSS occur in Dropdown endpoints due to an invalid Content-Type. This has been fixed in version 9.4.6.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free