CVE-2026-50766

CVE-2026-50766 is a stored XSS in Koha Library Management System (OPAC item detail page) up to version 25.11. An authenticated user with edit_items permission can inject arbitrary scripts via the itemnotes field (items.itemnotes). The connected sources confirm the vulnerability details but do not...