Medium severity5.4NVD Advisory· Published Mar 3, 2021· Updated Jun 17, 2026
CVE-2021-21314
CVE-2021-21314
Description
GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is an XSS vulnerability involving a logged in user while updating a ticket.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*range: <9.5.4
- (no CPE)range: <9.5.4
- (no CPE)range: < 9.5.4
Patches
Vulnerability mechanics
References
2- github.com/glpi-project/glpi/releases/tag/9.5.4nvdRelease NotesThird Party Advisory
- github.com/glpi-project/glpi/security/advisories/GHSA-2w7j-xgj7-3xggnvdThird Party Advisory
News mentions
0No linked articles in our index yet.