CVE-2026-53987Published
Tag Plugin for GLPI 11 before 2.14.4 Stored Cross-Site Scripting in Kanban Badge Rendering
Exact source revision recorded 29 Oct 2026 22:48:55 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-53987 · Microsoft / collected KEV context
cve-program · CVE-2026-53987
- https://github.com/pluginsGLPI/tag/security/advisories/GHSA-6rpj-89c7-x2mh
- https://github.com/pluginsGLPI/tag/releases/tag/2.14.4
- https://github.com/pluginsGLPI/tag
- https://github.com/pluginsGLPI/tag/commit/49e6b6eb5f83bcd84139a5e5ec54c0ddd14acc90
- https://www.vulncheck.com/advisories/glpi-tag-plugin-stored-cross-site-scripting-in-kanban-badge-rendering
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.