An unauthenticated user with write access to the knowledge base can store an XSS payload in a knowledge base item.

This issue affects glpi: before 11.0.7.