Description
Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function.
Medium · 5.4
CVE-2026-26377
EUVD-2026-9824GHSA-jf6c-m3q5-vfm4
Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via the News function.
Published Mar 5, 2026 · Updated Mar 10, 2026 · Assigned by mitre