CVE-2025-52360HIGH 8.8EPSS p36.1%

CVE-2025-52360CVE-2025-52360

Description

A Cross-Site Scripting (XSS) vulnerability exists in the OPAC search feature of Koha Library Management System v24.05. Unsanitized input entered in the search field is reflected in the search history interface, leading to the execution of arbitrary JavaScript in the browser context when the user interacts with the interface.

Scoring

CVSS 3.18.8 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS0.46% probability of exploitation · percentile 36.1% · 2026-06-18T12:00:27Z
Published2025-07-25
Last modified2026-04-15

Underlying weaknesses· 1

CWE-79

References

  1. https://gist.github.com/MerttTuran/32289a1d3c173f0b7934237c1696bef1

1

TypeTargetConfidenceTier
WeaknessImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')cwe-790%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-26378
CVE
CVE-2026-31844
CVE
CVE-2025-1301
CVE
CVE-2025-22954
CVE
CVE-2025-10592
CVE
CVE-2026-26379
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.