Lucene search
GoogleOSV:CVE-2022-24181HistoryApr 01, 2022 - 12:15 p.m.
CVE-2022-24181
2022-04-0112:15:07
Google
osv.dev
3
Cross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 >= 3.3 allows remote attackers to inject arbitary code via the X-Forwarded-Host Header.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pkp-lib | eq | ojs-2_4_8-1 | |
| pkp-lib | eq | ojs-2_4_8-4 | |
| pkp-lib | eq | ojs-2_4_8-3 | |
| pkp-lib | eq | ojs-2_4_8-2 | |
| pkp-lib | eq | ojs-2_4_8-5 | |
| pkp-lib | eq | ojs-2_4_8-0 |
References
Related
prion
prion
Cross site scripting
2022-04-01 12:15:00
cvelist
cvelist
CVE-2022-24181
2022-04-01 11:42:09
nvd
nvd
CVE-2022-24181
2022-04-01 12:15:07
nuclei
nuclei
PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting
2022-07-08 15:51:34
githubexploit
githubexploit
zdt
zdt
PKP Open Journals System 3.3 - Cross-Site Scripting Vulnerability
2022-04-19 00:00:00
packetstorm
packetstorm
PKP Open Journals System 3.3 Cross Site Scripting
2022-04-19 00:00:00
cve
cve
CVE-2022-24181
2022-04-01 12:15:07
exploitdb
exploitdb
PKP Open Journals System 3.3 - Cross-Site Scripting (XSS)
2022-04-19 00:00:00