CVE-2024-25438: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Submission module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Discussion function...

CVE-2024-25436: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Production module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Discussion function...

PT-2024-20940 · Public Knowledge · Pkp Ojs

Name of the Vulnerable Software and Affected Versions: Pkp Ojs version 3.3 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Publicname parameter. Recommendations: For Pkp Ojs version 3.3, consider...

CVE-2023-6671

A vulnerability has been discovered on OJS, that consists in a CSRF Cross-Site Request Forgery attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated...

Cross site request forgery (csrf)

A vulnerability has been discovered on OJS, that consists in a CSRF Cross-Site Request Forgery attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated...

CVE-2023-6671

CVE-2023-6671 describes a Cross-Site Request Forgery (CSRF) vulnerability in Open Journal Systems (OJS). Public records attribute the flaw to CSRF that can cause an end user, while authenticated, to perform unwanted actions in the application. The NVD entry frames the issue in OJS, with a high-se...

CVE-2023-6671: Cross-Site Request Forgery (CSRF)

A vulnerability has been discovered on OJS, that consists in a CSRF Cross-Site Request Forgery attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated...

CVE-2023-47271

PKP-WAL (pkp-lib) before 3.3.0-16, used in OJS and related products, fails to verify that a file named in an XML document (Native Import/Export plugin) is an image before using it as an issue cover image. The issue stems from PKPNativeFilterHelper::parsePublicationCover() in the NativeImportExpor...

CVE-2023-5894

Cross-site Scripting XSS - Stored in GitHub repository pkp/ojs prior to 3.3.0-16...

CVE-2023-5894

CVE-2023-5894 affects PKP Open Journals System (OJS) prior to 3.3.0-16. The vulnerability is a stored XSS in the title handling of pkp/ojs, caused by improper escaping of characters. Impact stated as possible script injection in the affected site. Remediation: upgrade to version 3.3.0-16 or later...

CVE-2023-5894 Cross-site Scripting (XSS) - Stored in pkp/ojs

Cross-site Scripting XSS - Stored in GitHub repository pkp/ojs prior to 3.3.0-16...

CVE-2023-5894 Cross-site Scripting (XSS) - Stored in pkp/ojs

Cross-site Scripting XSS - Stored in GitHub repository pkp/ojs prior to 3.3.0-16...

CVE-2023-5894: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository pkp/ojs prior to 3.3.0-16...

PT-2023-32401 · Pkp/Ojs · Pkp Ojs

Name of the Vulnerable Software and Affected Versions: pkp/ojs versions prior to 3.3.0-16 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository pkp/ojs. Recommendations: For versions prior to 3.3.0-16, update to version 3.3.0-16 or later to...

CVE-2023-5626

Cross-Site Request Forgery CSRF in GitHub repository pkp/ojs prior to 3.3.0-16...

CVE-2023-5626 Cross-Site Request Forgery (CSRF) in pkp/ojs

Cross-Site Request Forgery CSRF in GitHub repository pkp/ojs prior to 3.3.0-16...

CVE-2023-5626

CVE-2023-5626 affects Open Journal Systems (OJS) pkp/ojs versions prior to 3.3.0-16. Root cause is a Cross-Site Request Forgery (CSRF) vulnerability. The impact is described as high in CVSS metrics (C/H, I/H, A/H) for the NVD entry; exploitation may allow unauthorized actions requiring user inter...

CVE-2023-5626 Cross-Site Request Forgery (CSRF) in pkp/ojs

Cross-Site Request Forgery CSRF in GitHub repository pkp/ojs prior to 3.3.0-16...

CVE-2023-5626 Cross-Site Request Forgery (CSRF) in pkp/ojs

Cross-Site Request Forgery CSRF in GitHub repository pkp/ojs prior to 3.3.0-16...

CVE-2023-5626: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository pkp/ojs prior to 3.3.0-16...