CVE-2026-53987Published
Tag Plugin for GLPI 11 before 2.14.4 Stored Cross-Site Scripting in Kanban Badge Rendering
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-53987 · Microsoft / collected KEV context
cve-program · CVE-2026-53987
- https://github.com/pluginsGLPI/tag/security/advisories/GHSA-6rpj-89c7-x2mh
- https://github.com/pluginsGLPI/tag/releases/tag/2.14.4
- https://github.com/pluginsGLPI/tag
- https://github.com/pluginsGLPI/tag/commit/49e6b6eb5f83bcd84139a5e5ec54c0ddd14acc90
- https://www.vulncheck.com/advisories/glpi-tag-plugin-stored-cross-site-scripting-in-kanban-badge-rendering
Related operational evidence
Explicit CVE identifiers- Tag Plugin for GLPI 11 before 2.14.4 Stored Cross-Site Scripting in Kanban Badge Rendering · Affected-version evidence changed · 29 Oct 2026