Read the docs

Sfu

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Sfu records in CISA KEV

No Sfu vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pkp Web Application Library 12 records HIGH Open Journal System 3 records HIGH Open Journal Systems 2 records MEDIUM Customlocale 1 record HIGH

Records

12 records in Pkp Web Application Library · all components

TI-2023-05425 CVE-2023-5893 · GHSA-g7x3-4v2w-9vxw

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Priority HIGH 71

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00302 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352
TI-2023-05436 CVE-2023-5904 · GHSA-q675-425f-q77p

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00514 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05435 CVE-2023-5903 · GHSA-86g4-v35q-p7r3

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00514 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05428 CVE-2023-5896 · GHSA-m6g2-339q-45j8

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0039 Published 2023-11-01 Fixed in 3.4.0-4 CWE-79
TI-2023-05427 CVE-2023-5895 · GHSA-r23r-h529-fcxw

Cross-site Scripting (XSS) - DOM in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00475 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05424 CVE-2023-5892 · GHSA-9vrm-5j5h-x98j

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00467 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05423 CVE-2023-5891 · GHSA-rhhg-49v7-xmqc

Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00467 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05422 CVE-2023-5890 · GHSA-c368-3rx3-26ww

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00467 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05434 CVE-2023-5902

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Priority MEDIUM 53

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00289 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352
TI-2023-05432 CVE-2023-5900 · GHSA-5w9x-5g27-3wqv

Cross-Site Request Forgery in pkp/pkp-lib

Priority MEDIUM 53

Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00272 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352
TI-2023-05433 CVE-2023-5901 · GHSA-v93c-j63p-5mqw

Cross-site Scripting in pkp/pkp-lib

Priority LOW 23

Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00527 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
Open these records in search →