CVE-2026-50767

Summary: CVE-2026-50767 describes a stored XSS in the Koha Library Management System (through the 25.11 release) on the item type administration page. The vulnerability allows an authenticated remote attacker with administrator privileges to inject arbitrary web scripts via the item type check-in...