| Package | Affected versions | Patched versions |
|---|---|---|
| koha | = 3.14.00= 3.14.01= 3.14.02= 3.14.03= 3.14.04= 3.14.05= 3.14.06= 3.14.07= 3.14.08= 3.14.09= 3.14.10= 3.14.11= 3.14.12= 3.14.13= 3.14.14= 3.14.15= 3.16.00= 3.16.01= 3.16.02= 3.16.03= 3.16.04= 3.16.05= 3.16.06= 3.16.07= 3.16.08= 3.16.09= 3.16.10= 3.16.11= 3.20.00 |
Cross-site scripting (XSS) vulnerability in opac-addbybiblionumber.pl in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, and 3.20.x before 3.20.1 allows remote attackers to inject arbitrary web script or HTML via a crafted list name.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free