CVE-2026-50767

CVE-2026-50767CVE-2026-50767

Description

A stored cross-site scripting (XSS) vulnerability in the item type administration page of Koha Library Management System through 25.11 allows an authenticated remote attacker with administrator privileges to inject arbitrary web scripts via the item type check-in message field (checkinmsg)

Scoring

Last modified2026-06-26
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.