[HIGH] Snipe-IT: Stored XSS via Custom Field name in asset-list column headers

PKSA-t5db-tq3m-tn97 CVE-2026-62368 GHSA-p9h3-gvpq-5539

Affected package: snipe/snipe-it

Affected version: <8.7.0

Reported by:
GitHub