← volver
CVE-2022-39398

InfotelGLPI vulnerable to Cross-site Scripting

CVSS 8.8 HIGHEPSS 0.5%CWE-79
tasklists is a tasklists plugin for GLPI (Kanban). Versions prior to 2.0.3 are vulnerable to Cross-site Scripting. Cross-site Scripting (XSS) - Create XSS in task content (when add it). This issue is patched in version 2.0.3. There are no known workarounds.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
Productos afectados
InfotelGLPI · tasklists

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →