Vulnerability Description
An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. This issue affects glpi: before 11.0.7.
Related Weaknesses (CWE)
References
- https://fluidattacks.com/es/advisories/bizkit
- https://github.com/glpi-project/glpi
- https://github.com/glpi-project/glpi/releases/tag/11.0.7
- https://github.com/glpi-project/glpi/security/advisories/GHSA-2fg5-jg72-h338
- https://fluidattacks.com/es/advisories/bizkit
FAQ
What is CVE-2026-5385?
CVE-2026-5385 is a documented vulnerability. An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item. This issue affects glpi: before 11.0.7.
How severe is CVE-2026-5385?
CVSS scoring is not yet available for CVE-2026-5385. Check NVD for updates.
Is there a patch for CVE-2026-5385?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.