Volerion logoVolerion
Volerion logoVolerion

GLPI Stored Cross-Site Scripting Vulnerability in Knowledge Base Items

Vulnerability

A stored cross-site scripting vulnerability has been identified in GLPI versions prior to 11.0.7. This issue allows an unauthenticated user with write access to the knowledge base to inject an XSS payload into a knowledge base item.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the knowledge base item.

Remediation

Users are advised to upgrade to GLPI version 11.0.7, where this vulnerability has been patched.

Added: Jun 2, 2026, 8:19 PM
Updated: Jun 2, 2026, 8:19 PM

Vulnerability Rating

Custom Algorithm
spread
5.0
impact
1.7
exploitability
5.7
remediation
7.7
relevance
9.8
threat
3.2
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.