Read the docs

Public Knowledge Project

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Public Knowledge Project records in CISA KEV

No Public Knowledge Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Open Journal Systems 5 records MEDIUM Open Conference Systems 1 record LOW Open Harvester Systems 1 record LOW Open Monograph Press 1 record LOW

Records

5 records in Open Journal Systems · all components

TI-2024-16745 CVE-2024-25438 · GHSA-g7vc-r5r2-8x6v

A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3…

Priority MEDIUM 62

A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Disc…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00443 Published 2024-03-01 No fix listed CWE-79
TI-2024-07324 CVE-2024-7902 · GHSA-7q9g-rf94-v7cw

pkp ojs signOut redirect

Priority LOW 31

A vulnerability was found in pkp ojs up to 3.4.0-6 and classified as problematic.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00437 Published 2024-08-17 No fix listed CWE-601
Open these records in search →