CVE-2025-52360
A Cross-Site Scripting (XSS) vulnerability exists in the OPAC search feature of Koha Library Management System v24.05. Unsanitized input entered in the search field is reflected…
Published: 2025-07-25 · CVSS: 8.8 · CVSS 3.1
A Cross-Site Scripting (XSS) vulnerability exists in the OPAC search feature of Koha Library Management System v24.05. Unsanitized input entered in the search field is reflected in the search history interface, leading to the execution of arbitrary JavaScript in the browser context when the user interacts with the interface.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7