Skip to content

CVE-2015-4639 Cross-site scripting (XSS) vulnerability in opac-addbybiblionumber.pl in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, and 3.20.x before 3.20.1 allows remote attackers to inject arbitrary web scr...

HighCVSS 8.8 EPSS 0.62%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Cross-site scripting (XSS) vulnerability in opac-addbybiblionumber.pl in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, and 3.20.x before 3.20.1 allows remote attackers to inject arbitrary web script or HTML via a crafted list name.

Affected products

ProductAffected versionsFixed in
koha = 3.14.00 No fix listed
koha = 3.14.00-alpha1 No fix listed
koha = 3.14.00-alpha2 No fix listed
koha = 3.14.00-beta No fix listed
koha = 3.14.01 No fix listed
koha = 3.14.02 No fix listed
koha = 3.14.03 No fix listed
koha = 3.14.04 No fix listed
koha = 3.14.05 No fix listed
koha = 3.14.06 No fix listed
koha = 3.14.07 No fix listed
koha = 3.14.08 No fix listed
koha = 3.14.09 No fix listed
koha = 3.14.10 No fix listed
koha = 3.14.11 No fix listed
koha = 3.14.12 No fix listed
koha = 3.14.13 No fix listed
koha = 3.14.14 No fix listed
koha = 3.14.15 No fix listed
koha = 3.16.00 No fix listed
koha = 3.16.00-beta No fix listed
koha = 3.16.00-pkg No fix listed
koha = 3.16.00-rc No fix listed
koha = 3.16.01 No fix listed
koha = 3.16.02 No fix listed
Show 11 more
ProductAffected versionsFixed in
koha = 3.16.03 No fix listed
koha = 3.16.04 No fix listed
koha = 3.16.05 No fix listed
koha = 3.16.06 No fix listed
koha = 3.16.07 No fix listed
koha = 3.16.08 No fix listed
koha = 3.16.09 No fix listed
koha = 3.16.10 No fix listed
koha = 3.16.11 No fix listed
koha = 3.20.00 No fix listed
koha = 3.20.00-beta No fix listed

References