CVE-2024-24336

The Koha Library Management System (version 23.05.05 and earlier) is affected by a multiple Cross-site scripting (XSS) vulnerability within the '/members/moremember.pl' and ‘/members/members-home.pl’ endpoints. This flaw allows malicious staff users to perform Cross-site Request Forgery (CSRF) at...

CVE-2024-24336

A multiple Cross-site scripting XSS vulnerability in the '/members/moremember.pl', and ‘/members/members-home.pl’ endpoints within Koha Library Management System version 23.05.05 and earlier allows malicious staff users to carry out CSRF attacks, including unauthorized changes to usernames and...