Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A stored cross-site scripting (XSS) vulnerability in the item type administration page of Koha Library Management System 0 through 25.11 versions allow an authenticated remote attacker with administrator privileges to inject arbitrary web scripts via the item type check-in message field (checkinmsg).
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-50767](http://koha.com/) A stored cross-site scripting (XSS) vulnerability in the item ... http://koha.com/ #PatchManagement #Vulnerability #CVE
Post summary
The post announces CVE-2026-50767 as a stored XSS vulnerability, but it does not include any PoC, exploit, patch details, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | koha | koha | - | - | - |