[MEDIUM] Snipe-IT vulnerable to stored XSS via Markdown custom field

PKSA-6ddj-s9z1-gtxr CVE-2026-55464 GHSA-r52f-r9v5-66xr

Affected package: snipe/snipe-it

Affected version: <=8.6.1

Reported by:
GitHub