fields vulnerabilities

2 known vulnerabilities in fields from pluginsGLPI. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms.

  CVE-2026-23489Mar 16, 2026pluginsGLPI

  Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to version 1.23.3, it is possible to execute arbitrary PHP code from users that are allowed to create dropdowns. This issue has been patched in version 1.23.3.

• 7.7 High severity

  fields: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-45600Dec 26, 2024pluginsGLPI

  Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to 1.21.13, an authenticated user can perform a SQL injection when the plugin is active. The vulnerability is fixed in 1.21.13.