CVE-2023-5902

CVE-2023-5902 is a Cross-Site Request Forgery in the PKP Web Application Library (pkp-lib) prior to 3.3.0-16. Affected component: pkp-lib; vulnerable version range:

CVE-2023-5898

CVE-2023-5898 concerns a Cross-Site Request Forgery (CSRF) in the PKP PKP-lib project, affecting versions prior to 3.3.0-16. The vulnerability stems from a missing CSRF check in the affected code path, enabling unauthorized actions on behalf of authenticated users. Public references consistently ...

CVE-2023-5898 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5899

PKP PKP-lib, prior to 3.3.0-16, is affected by CSRF due to a missing CSRF check in the Review Details workflow. Exploitation could allow an attacker to perform actions on behalf of an authenticated user. Remediation: upgrade to version 3.3.0-16 or later (or apply the provided patches) per multipl...

CVE-2023-5902 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5899 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5902 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5895

CVE-2023-5895 affects the PKP library (pkp/pkp-lib) prior to 3.3.0-16, with a DOM-based Cross-site Scripting (XSS) flaw caused by unescaped user input in the web output. Public references in Red Hat and OSV/NVD confirm the issue as XSS in pkp/pkp-lib, tracked across multiple sources. The vulnerab...

CVE-2023-5895 Cross-site Scripting (XSS) - DOM in pkp/pkp-lib

Cross-site Scripting XSS - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5895 Cross-site Scripting (XSS) - DOM in pkp/pkp-lib

Cross-site Scripting XSS - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5895 Cross-site Scripting (XSS) - DOM in pkp/pkp-lib

Cross-site Scripting XSS - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5892 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5890

CVE-2023-5890 affects pkp/pkp-lib (PKP Web Application Library) prior to version 3.3.0-16. The issue is a Stored Cross-site Scripting (XSS) vulnerability arising from unescaped input in the repository, leading to script injection in impacted sites. The public references consistently describe the ...

CVE-2023-5890 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5889 Insufficient Session Expiration in pkp/pkp-lib

Insufficient Session Expiration in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5892 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5891 Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib

Cross-site Scripting XSS - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5893 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5893 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5891 Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib

Cross-site Scripting XSS - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16...