Description
Cross-Site Scripting (XSS) vulnerability in the patron restriction type administration page of Koha Library Management System through 25.11 allows an authenticated remote attacker with administrator privileges to inject arbitrary web scripts via the restriction type label (display_text field)
CVSS 6.1EPSS 0.248%Risque 0.62
Voir la source- Publication
- 2026-06-26 22:16:32
- Versions concernées
- <25.11
- Type
- Application web
- Vecteur
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N