CVE-2026-26377
Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function.
Original description
The description as published by the source.
Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function.
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- web g03m0n.github.io
- web g03m0n.github.io