[MEDIUM] Snipe-IT has Cross-site Scripting vulnerability in CSV import workflow

PKSA-c9tc-ctjb-ht9h CVE-2025-64027 GHSA-8x9v-8qgj-945x

Affected package: snipe/snipe-it

Affected version: <=8.3.4

Reported by:
GitHub