Security Advisory

CVE-2025-52360

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-07-25 00:00:00

Last updated 2025-07-25 14:35:18

Assigner mitre

State PUBLISHED

Description

A Cross-Site Scripting (XSS) vulnerability exists in the OPAC search feature of Koha Library Management System v24.05. Unsanitized input entered in the search field is reflected in the search history interface, leading to the execution of arbitrary JavaScript in the browser context when the user interacts with the interface.

← Browse all CVEs View on cve.org ↗