A vulnerability was found in GLPI 9.3.1. A Frame and Form tags Injection allowing admins to phish user or group of users by putting code in reminder description in the Tools > Reminder > Description section. References: https://github.com/glpi-project/glpi/pull/5519
Created glpi tracking bugs for this issue: Affects: epel-7 [bug 1736779] Affects: fedora-29 [bug 1736778]