CVE-2026-5385 – GLPI 11.0.0 – Stored XSS in knowledge base

CVE ID :CVE-2026-5385

Published : June 2, 2026, 8:16 p.m. | 16 minutes ago

Description :An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item.

This issue affects glpi: before 11.0.7.

Severity: 8.4 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…