Vulnerabilities

TI-2024-16742 CVE-2024-25434 · GHSA-c8qx-6p9j-mw59

A cross-site scripting (XSS) vulnerability in Pkp Ojs v3.3 allows attackers to execute…

LOW 25

A cross-site scripting (XSS) vulnerability in Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Publicname parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00406 Published 2024-03-01 No fix listed CWE-79

TI-2024-16164 CVE-2024-24512 · GHSA-7ppq-5vxg-mxp7

Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute…

MEDIUM 62

Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle component.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00528 Published 2024-03-01 No fix listed CWE-79

TI-2024-16163 CVE-2024-24511 · GHSA-ghf9-8669-q7h4

Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute…

MEDIUM 60

Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00517 Published 2024-03-01 No fix listed CWE-79

Vulnerabilities

Filters

A cross-site scripting (XSS) vulnerability in Pkp Ojs v3.3 allows attackers to execute…

Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute…

Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute…