← Database

CVE-2026-26378

MEDIUM CVSS: 5.4 Published: 2026-06-03 Modified: 2026-07-22

Description

Cross Site Scripting vulnerability in Koha 25.11 and before allows a remote attacker to execute arbitrary code via file upload function in Invoice features

Affected Platforms

Koha Koha

Weakness Type

CWE-79

References