PT-2025-31227
CVE-2025-27514
·
Published
2025-07-29
·
Updated
2025-08-27
Description by
CVSS 2.0
5.5
MediumMetricsAV:N/AC:L/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
GLPI versions 9.5.0 through 10.0.18
Description
GLPI is an Asset and IT Management Software package. A technician can utilize a malicious payload to trigger a stored Cross-Site Scripting (XSS) issue on the project's kanban.
Recommendations
Update to version 10.0.19 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾