GLPI Inventory Plugin Reflected Cross-Site Scripting Vulnerability in Task Jobs

A reflected cross-site scripting vulnerability has been identified in the GLPI Inventory Plugin, specifically in task jobs. This issue affects versions of the plugin prior to 1.6.6. The vulnerability arises from improper handling of user input, allowing for the injection of malicious scripts that could be executed in the context of the user.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user.

Remediation

Users can upgrade to GLPI Inventory Plugin version 1.6.6 or later to address this vulnerability.