CVE-2026-22821 | pluginsGLPI mreporting up to 1.9.3 sql injection (GHSA-24q7-h59q-33w8)

A vulnerability labeled as critical has been found in pluginsGLPI mreporting up to 1.9.3. This impacts an unknown function. Executing a manipulation can lead to sql injection.

This vulnerability appears as CVE-2026-22821. The attack may be performed from remote. There is no available exploit.

The affected component should be upgraded.