Read the docs

Sfu

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Sfu records in CISA KEV

No Sfu vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pkp Web Application Library 12 records HIGH Open Journal System 3 records HIGH Open Journal Systems 2 records MEDIUM Customlocale 1 record HIGH

Records

2 records in Open Journal Systems · all components

TI-2023-05426 CVE-2023-5894 · GHSA-7j74-mjgh-q8hf

Cross-site Scripting (XSS) - Stored in pkp/ojs

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/ojs prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00463 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2024-16744 CVE-2024-25436 · GHSA-j3m3-4fvw-ww8w

A cross-site scripting (XSS) vulnerability in the Production module of Pkp Ojs v3.3…

Priority LOW 28

A cross-site scripting (XSS) vulnerability in the Production module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Disc…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00443 Published 2024-03-01 No fix listed CWE-79
Open these records in search →