[Koha-bugs] [Bug 42866] SQL Injection in Koha/AdditionalContents.pm search_for_display via the patron lang value (stored / second-order, executed on issue-slip print, unvalidated string context, no placeholder)

3 Sep 2026


      https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42866

--- Comment #17 from Sanjarbiy <sanjarbiy11@gmail.com> ---
This has been assigned CVE-2026-72610.

-- 
You are receiving this mail because:
You are watching all bug changes.

[Koha-bugs] [Bug 42866] SQL Injection in Koha/AdditionalContents.pm search_for_display via the patron lang value (stored / second-order, executed on issue-slip print, unvalidated string context, no placeholder)

bugzilla-daemon＠bugs.koha-community.org