Vulnerabilities

TI-2025-12313 CVE-2025-13469 · GHSA-46mw-68fv-3w8x

Public Knowledge Project omp/ojs Payment Instructions Setting paymentForm.tpl cross site scripting

LOW 22

A security vulnerability has been detected in Public Knowledge Project omp and ojs 3.3.0/3.4.0/3.5.0.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00278 Published 2025-11-20 No fix listed CWE-79

TI-2024-07324 CVE-2024-7902 · GHSA-7q9g-rf94-v7cw

pkp ojs signOut redirect

LOW 31

A vulnerability was found in pkp ojs up to 3.4.0-6 and classified as problematic.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00437 Published 2024-08-17 No fix listed CWE-601

TI-2024-16745 CVE-2024-25438 · GHSA-g7vc-r5r2-8x6v

A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3…

MEDIUM 62

A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Disc…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00443 Published 2024-03-01 No fix listed CWE-79

TI-2022-09901 CVE-2022-26616 · GHSA-4mr3-vcgr-j557

PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected…

LOW 29

PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting (XSS) attacks via crafted HTTP headers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01013 Published 2022-04-04 No fix listed CWE-79

TI-2022-08116 CVE-2022-24181 · GHSA-3q2f-wr5w-xp3w

Cross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 >=…

LOW 36

Cross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 >= 3.3 allows remote attackers to inject arbitary code via the X-Forwarded-Host Header.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0608 Published 2022-04-01 No fix listed CWE-79

TI-2018-09036 CVE-2018-12588 · GHSA-5jp2-q7jr-92wr

Cross-site scripting (XSS) vulnerability in templates/frontend/pages/searchResults.tpl in…

LOW 30

Cross-site scripting (XSS) vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project (PKP) Open Monograph Press (OMP) v1.2.0 through 3.1.1-2 before 3.1.1-3 allows remote attackers to inject…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.016 Published 2018-06-19 No fix listed CWE-79

TI-2011-04474 CVE-2011-5197 · GHSA-rqj5-rg48-xj8w

Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public…

LOW 34

Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester Systems 2.3.1 and earlier allows remote attackers to hijack the authentication of administrators for…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01976 Published 2012-09-23 No fix listed CWE-352

TI-2011-04473 CVE-2011-5196 · GHSA-3frc-6c5w-8j5w

Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public…

LOW 33

Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack the authentication of administrators for re…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01334 Published 2012-09-23 No fix listed CWE-352

TI-2011-04472 CVE-2011-5195 · GHSA-vhrh-m7c9-49qf

Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public…

LOW 32

Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and earlier allows remote attackers to hijack the authentication of administrators for…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01109 Published 2012-09-23 No fix listed CWE-352

Vulnerabilities

Filters