4 matches found
EUVD-2025-4265
Malicious code in bioql PyPI...
PT-2025-7800
Name of the Vulnerable Software and Affected Versions Public Knowledge Project PKP OJS versions prior to 3.3.0.21 Public Knowledge Project PKP OMP versions prior to 3.3.0.21 Public Knowledge Project PKP OPS versions prior to 3.3.0.21 Public Knowledge Project PKP OJS versions 3.4.x prior to 3.4.0....
CVE-2024-56525
In Public Knowledge Project PKP OJS, OMP, and OPS before 3.3.0.21 and 3.4.x before 3.4.0.8, an XXE attack by the Journal Editor Role can create a new role as super admin in the journal context, and insert a backdoor plugin, by uploading a crafted XML document as a User XML Plugin...
CVE-2024-56525
In Public Knowledge Project PKP OJS, OMP, and OPS before 3.3.0.21 and 3.4.x before 3.4.0.8, an XXE attack by the Journal Editor Role can create a new role as super admin in the journal context, and insert a backdoor plugin, by uploading a crafted XML document as a User XML Plugin...