CVE-2023-5900 Cross-Site Request Forgery in pkp/pkp-lib

Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5903 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5903 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5900 Cross-Site Request Forgery in pkp/pkp-lib

Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5900 Cross-Site Request Forgery in pkp/pkp-lib

Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5900

CVE-2023-5900 is a Cross-Site Request Forgery vulnerability in the PKP Web Application Library used by PKP projects (OJS/OCS/OMP/OPS/OHS). The flaw affects versions prior to 3.3.0-16 and arises from a lack of CSRF authorization checking in the affected library. Public references describe the issu...

CVE-2023-5903

CVE-2023-5903 is a stored XSS vulnerability in the PKP Web Application Library (pkp-lib) affecting versions before 3.3.0-16. The issue exists in pkp/pkp-lib and stems from insecure handling of stored input (XSS). Public sources consistently state the vulnerable version range as prior to 3.3.0-16....

CVE-2023-5901

PKP-pkp-lib prior to version 3.3.0-16 is affected by a Cross-site Scripting (XSS) vulnerability. The issue originates from Unrestricted Upload of a file with dangerous type, enabling script execution via uploaded content in the PKP Web Application Library used by PKP projects (OJS/OCS/OMP/OPS/OHS...

CVE-2023-5903 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5901 Cross-site Scripting in pkp/pkp-lib

Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5902 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5899 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5902 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5899 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5898 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5896 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

Cross-site Scripting XSS - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4...

CVE-2023-5898 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

Cross-Site Request Forgery CSRF in GitHub repository pkp/pkp-lib prior to 3.3.0-16...

CVE-2023-5902

CVE-2023-5902 is a Cross-Site Request Forgery in the PKP Web Application Library (pkp-lib) prior to 3.3.0-16. Affected component: pkp-lib; vulnerable version range:

CVE-2023-5899

PKP PKP-lib, prior to 3.3.0-16, is affected by CSRF due to a missing CSRF check in the Review Details workflow. Exploitation could allow an attacker to perform actions on behalf of an authenticated user. Remediation: upgrade to version 3.3.0-16 or later (or apply the provided patches) per multipl...

CVE-2023-5896

CVE-2023-5896 is a stored XSS vulnerability in PKP's pkp-lib repository, affecting versions prior to 3.4.0-4. Impact is typical web:XSS with user export workflows (e.g., exporting journal users) as described in sources. Affected component: pkp/pkp-lib; root cause: stored XSS when exporting user d...