vulnerability

FreeBSD: VID-d222241d-91cc-11ea-82b8-4c72b94353b5 (CVE-2019-13239): glpi -- stored XSS

Try Surface Command

Severity

4

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

Published

May 9, 2020

Added

May 10, 2020

Modified

Jun 15, 2026

Description

inc/user.class.php in GLPI before 9.4.3 allows XSS via a user picture.

Solution

freebsd-upgrade-package-glpi

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.