Description
mreporting is the more reporting GLPI plugin. Prior to 1.9.4, there is a possible SQL injection on date change. This vulnerability is fixed in 1.9.4.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| pluginsGLPI | mreporting | < 1.9.4 | — |
Medium · 4.9
CVE-2026-22821
EUVD-2026-6704
mreporting affected by a SQLI on date change
Published Feb 12, 2026 · Updated Feb 12, 2026 · Assigned by GitHub_M