Approved changes feed: RSS · Atom

cpe:2.3:a:glpi:reports_plugin_for_glpi:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGlpi (090297f7-21a3-587f-a4fe-f6bbc7d570a2)
ProductReports Plugin For Glpi (9ffcf674-e647-5af5-b5e2-a980473645d8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-39181 vulnerable 2026-06-03 14:47:51.196438 GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting (RXSS)
MEDIUM (6.1)
GLPI - Reports plugin for GLPI Reflected Cross-Site-Scripting (RXSS). Type 1: Reflected XSS (or Non-Persistent) - The server reads data directly from the HTTP request and reflects it back in the HTTP response. Reflected XSS exploits occur when an attacker causes a victim to supply dangerous content to a vulnerable web application, which is then reflected back to the victim and executed by the web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that is posted publicly or emailed directly to the victim. URLs constructed in this manner constitute the core of many phishing schemes, whereby an attacker convinces a victim to visit a URL that refers to a vulnerable site. After the site reflects the attacker's content back to the victim, the content is executed by the victim's browser.
Published: 2022-11-17T22:27:54.504Z
Updated: 2025-04-29T19:48:20.822Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.