Total vulnerabilities in the database
Cross-site scripting (XSS) vulnerability in opac-addbybiblionumber.pl in Koha 3.14.x before 3.14.16, 3.16.x before 3.16.12, and 3.20.x before 3.20.1 allows remote attackers to inject arbitrary web script or HTML via a crafted list name.
| Software | From | Fixed in |
|---|---|---|
| koha / koha | 3.14.11 | 3.14.11.x |
| koha / koha | 3.16.06 | 3.16.06.x |
| koha / koha | 3.16.00 | 3.16.00.x |
| koha / koha | 3.14.01 | 3.14.01.x |
| koha / koha | 3.14.08 | 3.14.08.x |
| koha / koha | 3.14.00-alpha1 | 3.14.00-alpha1.x |
| koha / koha | 3.14.04 | 3.14.04.x |
| koha / koha | 3.14.14 | 3.14.14.x |
| koha / koha | 3.14.00-alpha2 | 3.14.00-alpha2.x |
| koha / koha | 3.16.09 | 3.16.09.x |
| koha / koha | 3.20.00-beta | 3.20.00-beta.x |
| koha / koha | 3.14.00-beta | 3.14.00-beta.x |
| koha / koha | 3.16.04 | 3.16.04.x |
| koha / koha | 3.16.11 | 3.16.11.x |
| koha / koha | 3.16.05 | 3.16.05.x |
| koha / koha | 3.16.01 | 3.16.01.x |
| koha / koha | 3.20.00 | 3.20.00.x |
| koha / koha | 3.16.00-pkg | 3.16.00-pkg.x |
| koha / koha | 3.16.00-rc | 3.16.00-rc.x |
| koha / koha | 3.14.09 | 3.14.09.x |
| koha / koha | 3.14.02 | 3.14.02.x |
| koha / koha | 3.16.00-beta | 3.16.00-beta.x |
| koha / koha | 3.14.07 | 3.14.07.x |
| koha / koha | 3.14.05 | 3.14.05.x |
| koha / koha | 3.16.07 | 3.16.07.x |
| koha / koha | 3.14.12 | 3.14.12.x |
| koha / koha | 3.14.13 | 3.14.13.x |
| koha / koha | 3.16.03 | 3.16.03.x |
| koha / koha | 3.14.03 | 3.14.03.x |
| koha / koha | 3.14.15 | 3.14.15.x |
| koha / koha | 3.14.00 | 3.14.00.x |
| koha / koha | 3.16.10 | 3.16.10.x |
| koha / koha | 3.14.10 | 3.14.10.x |
| koha / koha | 3.16.02 | 3.16.02.x |
| koha / koha | 3.14.06 | 3.14.06.x |
| koha / koha | 3.16.08 | 3.16.08.x |