Read the docs

Sfu

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Sfu records in CISA KEV

No Sfu vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pkp Web Application Library 12 records HIGH Open Journal System 3 records HIGH Open Journal Systems 2 records MEDIUM Customlocale 1 record HIGH

Records

18 records

TI-2023-05429 CVE-2023-5897 · GHSA-h6c7-v3fj-vggf

Cross-Site Request Forgery (CSRF) in pkp/customLocale

Priority HIGH 71

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/customLocale prior to 1.2.0-1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00247 Published 2023-11-01 Fixed in 1.2.0-1 CWE-352
TI-2023-05425 CVE-2023-5893 · GHSA-g7x3-4v2w-9vxw

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Priority HIGH 71

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00302 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352
TI-2023-05178 CVE-2023-5626 · GHSA-9m4v-rfw4-5c96

Cross-Site Request Forgery (CSRF) in pkp/ojs

Priority HIGH 71

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00302 Published 2023-10-17 Fixed in 3.3.0-16 CWE-352
TI-2023-05436 CVE-2023-5904 · GHSA-q675-425f-q77p

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00514 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05435 CVE-2023-5903 · GHSA-86g4-v35q-p7r3

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00514 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05428 CVE-2023-5896 · GHSA-m6g2-339q-45j8

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0039 Published 2023-11-01 Fixed in 3.4.0-4 CWE-79
TI-2023-05427 CVE-2023-5895 · GHSA-r23r-h529-fcxw

Cross-site Scripting (XSS) - DOM in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00475 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05426 CVE-2023-5894 · GHSA-7j74-mjgh-q8hf

Cross-site Scripting (XSS) - Stored in pkp/ojs

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/ojs prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00463 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05424 CVE-2023-5892 · GHSA-9vrm-5j5h-x98j

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00467 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05423 CVE-2023-5891 · GHSA-rhhg-49v7-xmqc

Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00467 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05422 CVE-2023-5890 · GHSA-c368-3rx3-26ww

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00467 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05434 CVE-2023-5902

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Priority MEDIUM 53

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00289 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352
TI-2023-05432 CVE-2023-5900 · GHSA-5w9x-5g27-3wqv

Cross-Site Request Forgery in pkp/pkp-lib

Priority MEDIUM 53

Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00272 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352
TI-2018-08771 CVE-2018-12229 · GHSA-xf37-6324-4rfx

Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal…

Priority LOW 31

Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System (OJS) 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or HTML via the templates/frontend/pages/search…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01768 Published 2018-06-12 No fix listed CWE-79
TI-2024-16744 CVE-2024-25436 · GHSA-j3m3-4fvw-ww8w

A cross-site scripting (XSS) vulnerability in the Production module of Pkp Ojs v3.3…

Priority LOW 28

A cross-site scripting (XSS) vulnerability in the Production module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Disc…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00443 Published 2024-03-01 No fix listed CWE-79
TI-2023-05433 CVE-2023-5901 · GHSA-v93c-j63p-5mqw

Cross-site Scripting in pkp/pkp-lib

Priority LOW 23

Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00527 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
Open these records in search →