Impact

A user with dashboard administration rights may hack the dashboard form to store malicious code that will be executed when other users will use the related dashboard.

Patches

Upgrade to 10.0.7.

For more information

If you have any questions or comments about this advisory, mail us at glpi-security@ow2.org.