We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-52360



Description

A Cross-Site Scripting (XSS) vulnerability exists in the OPAC search feature of Koha Library Management System v24.05. Unsanitized input entered in the search field is reflected in the search history interface, leading to the execution of arbitrary JavaScript in the browser context when the user interacts with the interface.

Reserved 2025-06-16 | Published 2025-07-25 | Updated 2025-07-25 | Assigner mitre

References

gist.github.com/MerttTuran/32289a1d3c173f0b7934237c1696bef1

cve.org (CVE-2025-52360)

nvd.nist.gov (CVE-2025-52360)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-52360

Support options

Helpdesk Chat, Email, Knowledgebase