CVE-2015-4639 | BDVDB-2026-87967 Detail

Description#

Cross-site scripting (XSS) vulnerability in opac-addbybiblionumber.pl in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, and 3.20.x before 3.20.1 allows remote attackers to inject arbitrary web script or HTML via a crafted list name.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=14416#c4
https://koha-community.org/security-release-koha-3-16-12/
https://koha-community.org/security-release-koha-3-20-1/
https://koha-community.org/koha-3-14-16-released/

Exploit#

No public exploit known

History#

Version 12017-07-21Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.