CVE-2024-40500: Scilico I, Librarian

High severity, CVSS 8.6. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in Martin Kucej i-librarian v.5.11.0 and before allows a local attacker to execute arbitrary code via the search function in the import component.

Affected products

• Scilico I, Librarian: up to and including 5.11.0

Published 2024-08-12. Last modified 2026-06-17.