CVE-2026-50767
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Jun 26, 2026
Vendor
unknown
Description
A stored cross-site scripting (XSS) vulnerability in the item type administration page of Koha Library Management System through 25.11 allows an authenticated remote attacker with administrator privileges to inject arbitrary web scripts via the item type check-in message field (checkinmsg)