CVE-2026-42321 | glpi-project glpi up to 10.0.24 Asset Locked Tab cross site scripting

A vulnerability was found in glpi-project glpi up to 10.0.24 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Asset Locked Tab. The manipulation results in cross site scripting.

This vulnerability was named CVE-2026-42321. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.