[Bug 42866] SQL Injection in Koha/AdditionalContents.pm search_for_display via the patron lang value (stored / second-order, executed on issue-slip print, unvalidated string context, no placeholder)
11 Aug
2026
11 Aug
'26
2:42 p.m.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42866 Pedro Amorim (ammopt) <pedro.amorim@openfifth.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to main Version(s)|26.05.02,25.11.07,25.05.13, |26.11.00,26.05.02,25.11.07, released in|24.11.18 |25.05.13,24.11.18 -- You are receiving this mail because: You are watching all bug changes.
11
Age (days ago)
11
Last active (days ago)
0 comments
1 participants
participants (1)
-
bugzilla-daemon＠bugs.koha-community.org