Read the docs

Sfu

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Sfu records in CISA KEV

No Sfu vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pkp Web Application Library 12 records HIGH Open Journal System 3 records HIGH Open Journal Systems 2 records MEDIUM Customlocale 1 record HIGH

Records

3 records in Open Journal System · all components

TI-2023-05178 CVE-2023-5626 · GHSA-9m4v-rfw4-5c96

Cross-Site Request Forgery (CSRF) in pkp/ojs

Priority HIGH 71

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00302 Published 2023-10-17 Fixed in 3.3.0-16 CWE-352
TI-2018-08771 CVE-2018-12229 · GHSA-xf37-6324-4rfx

Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal…

Priority LOW 31

Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System (OJS) 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or HTML via the templates/frontend/pages/search…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01768 Published 2018-06-12 No fix listed CWE-79
Open these records in search →