CVE-2025-52360 Information
Jul 26, 2025
cve
Description
A Cross-Site Scripting (XSS) vulnerability exists in the OPAC search feature of Koha Library Management System v24.05. Unsanitized input entered in the search field is reflected in the search history interface leading to the execution of arbitrary JavaScript in the browser context when the user interacts with the interface.
Reference
https://gist.github.com/MerttTuran/32289a1d3c173f0b7934237c1696bef1
Related CNNVD
CNNVD-202507-3161 (Published: 2025-07-25)
Share on: