93 matches found
PT-2024-20943 · Public Knowledge · Pkp Ojs
Name of the Vulnerable Software and Affected Versions: Pkp Ojs version 3.3 Description: A cross-site scripting XSS issue in the Submission module allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Discussion function...
CVE-2024-24511
PKP Open Journal Systems (OJS) v.3.4 is affected by a Cross-Site Scripting (XSS) vulnerability located in the Input Title component. This flaw allows an attacker to execute arbitrary code, which is categorized as Improper Neutralization of Input During Web Page Generation (CWE-79). While the prov...
PT-2024-20942 · Public Knowledge · Pkp Ojs
Name of the Vulnerable Software and Affected Versions: Pkp Ojs version 3.3 Description: A cross-site scripting XSS issue in the Production module allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Discussion function...
CVE-2024-24512
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle component...
CVE-2024-25438
A cross-site scripting XSS vulnerability in the Submission module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Discussion function...
CVE-2024-25436
A cross-site scripting XSS vulnerability in the Production module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Discussion function...
CVE-2024-24512
Pkp OJS version 3.4 is affected by a Cross Site Scripting (XSS) vulnerability. The flaw originates from the input subtitle component , which allows an attacker to execute arbitrary code. To mitigate the risk, it is recommended to disable the input subtitle component until a formal patch is releas...
CVE-2024-25438
A cross-site scripting XSS vulnerability in the Submission module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Discussion function...
CVE-2024-24511
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component...
CVE-2024-24512
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle component...
CVE-2024-25434
A cross-site scripting (XSS) vulnerability exists in Pkp Ojs v3.3 , an open-source journal publication management software. The flaw originates from the improper neutralization of input during web page generation, specifically allowing an attacker to inject and execute arbitrary web scripts or HT...
CVE-2024-25436
A cross-site scripting XSS vulnerability in the Production module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Discussion function...
CVE-2024-24512: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle component...
CVE-2024-24511: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component...
CVE-2024-25434: Improper Neutralization of Input During Web Page Generation
A cross-site scripting XSS vulnerability in Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Publicname parameter...
Pkp Ojs Cross Site Scripting Vulnerability
affinitybridge Pkp Ojs is an open source journal publication management software system from affinitybridge. A cross-site scripting vulnerability exists in Pkp Ojs version v3.3, which originates from a vulnerability that allows an attacker to execute arbitrary web script or HTML using a crafted...
CVE-2024-25436
CVE-2024-25436 is an XSS vulnerability in PKP Open Journal Systems (PKP OJS) v3.3, affecting the Production/Submission flow where a crafted payload in the Add Discussion subject input can execute arbitrary scripts in the victim’s browser. The cited sources consistently describe the vulnerability ...
CVE-2024-25438
A cross-site scripting (XSS) vulnerability exists in the Submission module of Pkp Ojs v3.3 . Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the Input subject field within the Add Discussion function. Practical consequences include the execution of maliciou...