CyberRota
← Ana sayfaya dön

CVE-2026-50766

MEDIUM · CVSS 5.4 EPSS %0.20

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-06-26T22:16:32.617 · Çekilme zamanı: 2026-06-30T18:36:21.559650+00:00

CyberRota Yorumu

Uzaktan istismar edilebilir olabilir.

CVE
CVE-2026-50766
Severity
MEDIUM
CVSS
5.4
EPSS
%0.20

Orijinal NVD Açıklaması

A stored cross-site scripting (XSS) vulnerability in the OPAC item detail page of Koha Library Management System 0 through 25.11 versions allow an authenticated remote attacker with edit_items permission to inject arbitrary web scripts via the item public notes field (items.itemnotes).