007Nicky

**Name of the Vulnerable Software and Affected Versions** GLPI versions 9.5.0 through 9.5.12 GLPI versions 10.0.0 through 10.0.6 **Description** The issue is related to insufficient cleaning of user data in the administration panel, allowing a user to inject and execute arbitrary HTML and script code in the user's browser within the context of the vulnerable website. This can enable a remote attacker to steal potentially confidential information, modify the appearance of the web page, and perform phishing and drive-by download attacks. **Recommendations** For GLPI versions 9.5.0 through 9.5.12, update to version 9.5.13 or later to resolve the issue. For GLPI versions 10.0.0 through 10.0.6, update to version 10.0.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the administration panel to minimize the risk of exploitation.