CVE-2025-52360

n/a / n/a PUBLISHED

Description (CNA)

A Cross-Site Scripting (XSS) vulnerability exists in the OPAC search feature of Koha Library Management System v24.05. Unsanitized input entered in the search field is reflected in the search history interface, leading to the execution of arbitrary JavaScript in the browser context when the user interacts with the interface.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://gist.github.com/MerttTuran/32289a1d3c173f0b7934237c1696bef1

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.