[Bug 42866] SQL Injection in Koha/AdditionalContents.pm search_for_display via the patron lang value (stored / second-order, executed on issue-slip print, unvalidated string context, no placeholder)
3 Sep
2026
3 Sep
'26
3:52 p.m.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42866 --- Comment #17 from Sanjarbiy <sanjarbiy11@gmail.com> --- This has been assigned CVE-2026-72610. -- You are receiving this mail because: You are watching all bug changes.
12
Age (days ago)
12
Last active (days ago)
0 comments
1 participants
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org