CVE-2021-21258

GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI from version 9.5.0 and before version 9.5.4, there is a cross-site scripting injection vulnerability when using ajax/kanban.php. This is fixed in version 9.5.4.

• CWE-79

• https://github.com/glpi-project/glpi/commit/e7802fc051696de1f76108ea8dc3bd4e2c880f15Patch, Third Party Advisory
• https://github.com/glpi-project/glpi/security/advisories/GHSA-j4xj-4qmc-mmmxThird Party Advisory
• https://github.com/glpi-project/glpi/commit/e7802fc051696de1f76108ea8dc3bd4e2c880f15Patch, Third Party Advisory
• https://github.com/glpi-project/glpi/security/advisories/GHSA-j4xj-4qmc-mmmxThird Party Advisory

Published

Mar 2, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-21251OneDev is an all-in-one devops platform. In OneDev before ve…8.8
• CVE-2021-21252The jQuery Validation Plugin provides drop-in validation for…7.5
• CVE-2021-21253OnlineVotingSystem is an open source project hosted on GitHu…5.3
• CVE-2021-21254CKEditor 5 is an open source rich text editor framework with…6.5
• CVE-2021-21255GLPI is an open-source asset and IT management software pack…5.7
• CVE-2021-21257Contiki-NG is an open-source, cross-platform operating syste…7.5
• CVE-2021-21259HedgeDoc is open source software which lets you create real-…6.1
• CVE-2021-2126Vulnerability in the Oracle VM VirtualBox product of Oracle …6
• CVE-2021-21260Online Invoicing System (OIS) is open source software which …5.4
• CVE-2021-21261Flatpak is a system for building, distributing, and running …8.8
• CVE-2021-21263Laravel is a web application framework. Versions of Laravel …5.3
• CVE-2021-21264October is a free, open-source, self-hosted CMS platform bas…5.2