Skip to content
OpenAdvisories
High · 8.8 CVE-2022-39398 EUVD-2022-41843

InfotelGLPI vulnerable to Cross-site Scripting

Published Nov 10, 2022 · Updated Apr 23, 2025 · Assigned by GitHub_M

Description

tasklists is a tasklists plugin for GLPI (Kanban). Versions prior to 2.0.3 are vulnerable to Cross-site Scripting. Cross-site Scripting (XSS) - Create XSS in task content (when add it). This issue is patched in version 2.0.3. There are no known workarounds.

Affected products

VendorProductAffectedFixed
InfotelGLPI tasklists < 2.0.3 —

References