Ex libris ALEPH 500 Cross-Site Scripting Vulnerability

Ex libris ALEPH 500 is an integrated library system from the Israeli company Ex libris. ex libris ALEPH 500 v18.1 and v20 versions are vulnerable to a cross-site scripting vulnerability that stems from the program’s lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to execute arbitrary web script or HTML.