Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

18 records

Vendor: Sfu Clear all filters
TI-2024-16744 CVE-2024-25436 · GHSA-j3m3-4fvw-ww8w

A cross-site scripting (XSS) vulnerability in the Production module of Pkp Ojs v3.3…

Priority LOW 28

A cross-site scripting (XSS) vulnerability in the Production module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Disc…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00443 Published 2024-03-01 No fix listed CWE-79
TI-2023-05436 CVE-2023-5904 · GHSA-q675-425f-q77p

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00514 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05435 CVE-2023-5903 · GHSA-86g4-v35q-p7r3

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00514 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05432 CVE-2023-5900 · GHSA-5w9x-5g27-3wqv

Cross-Site Request Forgery in pkp/pkp-lib

Priority MEDIUM 53

Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00272 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352
TI-2023-05433 CVE-2023-5901 · GHSA-v93c-j63p-5mqw

Cross-site Scripting in pkp/pkp-lib

Priority LOW 23

Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00527 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05429 CVE-2023-5897 · GHSA-h6c7-v3fj-vggf

Cross-Site Request Forgery (CSRF) in pkp/customLocale

Priority HIGH 71

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/customLocale prior to 1.2.0-1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00247 Published 2023-11-01 Fixed in 1.2.0-1 CWE-352
TI-2023-05434 CVE-2023-5902

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Priority MEDIUM 53

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00289 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352
TI-2023-05428 CVE-2023-5896 · GHSA-m6g2-339q-45j8

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0039 Published 2023-11-01 Fixed in 3.4.0-4 CWE-79
TI-2023-05427 CVE-2023-5895 · GHSA-r23r-h529-fcxw

Cross-site Scripting (XSS) - DOM in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00475 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05426 CVE-2023-5894 · GHSA-7j74-mjgh-q8hf

Cross-site Scripting (XSS) - Stored in pkp/ojs

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/ojs prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00463 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05423 CVE-2023-5891 · GHSA-rhhg-49v7-xmqc

Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00467 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05424 CVE-2023-5892 · GHSA-9vrm-5j5h-x98j

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00467 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05425 CVE-2023-5893 · GHSA-g7x3-4v2w-9vxw

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Priority HIGH 71

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00302 Published 2023-11-01 Fixed in 3.3.0-16 CWE-352
TI-2023-05422 CVE-2023-5890 · GHSA-c368-3rx3-26ww

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00467 Published 2023-11-01 Fixed in 3.3.0-16 CWE-79
TI-2023-05178 CVE-2023-5626 · GHSA-9m4v-rfw4-5c96

Cross-Site Request Forgery (CSRF) in pkp/ojs

Priority HIGH 71

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00302 Published 2023-10-17 Fixed in 3.3.0-16 CWE-352
TI-2018-08771 CVE-2018-12229 · GHSA-xf37-6324-4rfx

Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal…

Priority LOW 31

Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System (OJS) 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or HTML via the templates/frontend/pages/search…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01768 Published 2018-06-12 No fix listed CWE-79