Cross-Site Scripting (XSS) in GLPI Inventory Endpoint

CVE-2026-26027

Apr 6, 2026

Analyzed

Category:

Cross-Site Scripting (XSS)

CWE:

CWE-79;CWE-116;CWE-306

Impact:

Stored Cross-Site Scripting leading to unauthorized actions in the context of affected user sessions

Severity:

HIGH RISK

(7.5)

CVSS Version:

3.1

Detect vulnerable code directly in pull requests, so CVEs are fixed before merge.

Get Started

text

NDV

[GET STARTED]

Find out what's already

START PENTEST

NO CC REQUIRED

BOOK A DEMO

CodeAnt AI

355 Bryant St, San Francisco, CA 94107

CodeAnt AI

355 Bryant St, San Francisco, CA 94107