Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Sfu Component: Open Journal System Clear all filters
TI-2023-05178 CVE-2023-5626 · GHSA-9m4v-rfw4-5c96

Cross-Site Request Forgery (CSRF) in pkp/ojs

Priority HIGH 71

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00302 Published 2023-10-17 Fixed in 3.3.0-16 CWE-352
TI-2018-08771 CVE-2018-12229 · GHSA-xf37-6324-4rfx

Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal…

Priority LOW 31

Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System (OJS) 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or HTML via the templates/frontend/pages/search…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01768 Published 2018-06-12 No fix listed CWE-79