TI-2024-07324 CVE-2024-7902 · GHSA-7q9g-rf94-v7cw
pkp ojs signOut redirect
Priority LOW 31
A vulnerability was found in pkp ojs up to 3.4.0-6 and classified as problematic.
Vulnerabilities
5 records
TI-2024-16745 CVE-2024-25438 · GHSA-g7vc-r5r2-8x6v
A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3…
Priority MEDIUM 62
A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Disc…
TI-2022-09901 CVE-2022-26616 · GHSA-4mr3-vcgr-j557
PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected…
Priority LOW 29
PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting (XSS) attacks via crafted HTTP headers.
TI-2022-08116 CVE-2022-24181 · GHSA-3q2f-wr5w-xp3w
Cross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 >=…
Priority LOW 36
Cross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 >= 3.3 allows remote attackers to inject arbitary code via the X-Forwarded-Host Header.
TI-2011-04473 CVE-2011-5196 · GHSA-3frc-6c5w-8j5w
Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public…
Priority LOW 33
Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack the authentication of administrators for re…