Lucene search
+L

5566 matches found

Cvelist
Cvelist
•added 2023/11/01 12:00 a.m.•41 views

CVE-2023-5893 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

3.5CVSS9.1AI score0.00264EPSS
SaveExploits1References2
CVE
CVE
•added 2023/11/01 12:00 a.m.•72 views

CVE-2023-5890

CVE-2023-5890 affects pkp/pkp-lib (PKP Web Application Library) prior to version 3.3.0-16. The issue is a Stored Cross-site Scripting (XSS) vulnerability arising from unescaped input in the repository, leading to script injection in impacted sites. The public references consistently describe the ...

5.4CVSS5.5AI score0.00404EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/11/01 12:00 a.m.•12 views

CVE-2023-5892 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

5.4CVSS5.3AI score0.00404EPSS
SaveExploits1References2
Mend
Mend
•added 2023/11/01 12:00 a.m.•2 views

CVE-2023-5889

Insufficient Session Expiration in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

8.2CVSS0.0044EPSS
SaveExploits1References4
Mend
Mend
•added 2023/11/01 12:00 a.m.•5 views

CVE-2023-5891

Cross-site Scripting XSS - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

5.4CVSS0.00404EPSS
SaveExploits1References4
CVE
CVE
•added 2023/11/01 12:00 a.m.•91 views

CVE-2023-5891

CVE-2023-5891 is a Cross-site Scripting (XSS) vulnerability in PKP Web Application Library (PKP-lib) prior to version 3.3.0-16. The issue arises from unescaped user input in web responses, enabling reflected XSS attacks in the pkp/pkp-lib component. Affected software is PKP Web Application Librar...

5.4CVSS6AI score0.00404EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2023/11/01 12:00 a.m.•2 views

CVE-2023-5890

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

5.4CVSS0.00404EPSS
SaveExploits1References4
Mend
Mend
•added 2023/11/01 12:00 a.m.•2 views

CVE-2023-5892

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

5.4CVSS0.00404EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2023/11/01 12:00 a.m.•18 views

CVE-2023-5891 Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib

Cross-site Scripting XSS - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

5.4CVSS5.4AI score0.00404EPSS
SaveExploits1References2
Mend
Mend
•added 2023/11/01 12:00 a.m.•2 views

CVE-2023-5893

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

8.8CVSS0.00264EPSS
SaveExploits1References4
OSV
OSV
•added 2023/11/01 12:00 a.m.•20 views

CVE-2023-5892 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

5.4CVSS5.5AI score
SaveExploits0References4
OSV
OSV
•added 2023/11/01 12:00 a.m.•32 views

CVE-2023-5891 Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib

Cross-site Scripting XSS - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

5.4CVSS5.5AI score
SaveExploits0References4
OSV
OSV
•added 2023/11/01 12:00 a.m.•25 views

CVE-2023-5890 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

4.6CVSS4.8AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/01 12:00 a.m.•8 views

CVE-2023-5901: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

4.8CVSS5.6AI score0.0046EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/01 12:00 a.m.•7 views

CVE-2023-5893: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

8.8CVSS5.4AI score0.00264EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/11/01 12:00 a.m.•22 views

PT-2023-32400 · Pkp · Pkp-Lib

Name of the Vulnerable Software and Affected Versions: pkp/pkp-lib versions prior to 3.3.0-16 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository pkp/pkp-lib. Recommendations: For versions prior to 3.3.0-16, update to version 3.3.0-16 or later to resolve...

8.8CVSS3.9AI score0.00264EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/01 12:00 a.m.•4 views

CVE-2023-5899: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

8.8CVSS5.4AI score0.00264EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/11/01 12:00 a.m.•16 views

PT-2023-32409 · Pkp · Pkp-Lib

Name of the Vulnerable Software and Affected Versions: pkp/pkp-lib versions prior to 3.3.0-16 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository pkp/pkp-lib. Recommendations: For versions prior to 3.3.0-16, update to version 3.3.0-16 or later to resolve...

4.3CVSS4.6AI score0.00255EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/01 12:00 a.m.•6 views

CVE-2023-5902: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

4.3CVSS5.5AI score0.00255EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/01 12:00 a.m.•6 views

CVE-2023-5896: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4...

5.4CVSS5.4AI score0.00338EPSS
SaveExploits1References2
Rows per page
Query Builder