TI-2018-11539 CVE-2018-16139 · GHSA-475w-647m-pcrrCross-site scripting (XSS) vulnerability in BIBLIOsoft BIBLIOpac 2008 allows remote…Priority LOW 32Cross-site scripting (XSS) vulnerability in BIBLIOsoft BIBLIOpac 2008 allows remote attackers to inject arbitrary web script or HTML via the db or action parameter to to bin/wxis.exe/bibliopac/.CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02285 · Published 2019-05-13 · No fix listed CWE-79