CVE-2024-24511

CVE-2024-24511 affects PKP OPEN JOURNAL SYSTEMS (PKP OJS) v3.4, with a Cross Site Scripting vulnerability in the Input Title component that could allow an attacker to execute arbitrary code. The public sources consistently cite PKP OJS 3.4 as vulnerable and describe the issue as a stored XSS vect...

CVE-2024-24512

CVE-2024-24512 concerns PKP Open Journal Systems (PKP OJS) 3.4. It is a Cross Site Scripting (XSS) vulnerability in the input subtitle component that could allow an attacker to execute arbitrary code. The CVE is documented with a CVSS v3.1 base score of 6.1 (MEDIUM) with network attack vector, lo...

CVE-2024-25434

CVE-2024-25434 affects Pkp Ojs v3.3, with a stored/reflected XSS vulnerability in the Publicname parameter. The available sources describe that arbitrary web scripts/HTML can be executed via crafted input, but do not provide a confirmed exploit method or patch details. CVSS 3.1 base score is 5.4 ...