http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=11307 Bug ID: 11307 Summary: Potential XSS attack vector in opac rss feed Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: critical Priority: P5 - low Component: OPAC Assignee: oleonard@myacpl.org Reporter: chris@bigballofwax.co.nz QA Contact: testopia@bugs.koha-community.org http://demo.mykoha.co.nz/cgi-bin/koha/opac-search.pl?idx=kw&q=a&coun... If you look at the source you will see <opensearch:itemsPerPage>50"'<h1>test</h1></opensearch:itemsPerPage> -- You are receiving this mail because: You are watching all bug changes.