1 matches found
CVE-2018-1000670: Improper Neutralization of Input During Web Page Generation
KOHA Library System version 16.11.x up until 16.11.13 and 17.05.x up until 17.05.05 contains a Cross Site Scripting XSS vulnerability in Multiple fields on multiple pages including /cgi-bin/koha/acqui/supplier.pl?op=enter , /cgi-bin/koha/circ/circulation.pl?borrowernumber=number ,...
6.1CVSS6.2AI score0.00648EPSS
SaveExploits1References2
20