Login Request a demo
PW
Product
Pkp Web Application Library
by Sfu · last CVE Nov 5, 2023
12
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 0High 1Medium 11Low 0
Severity
All severities12Critical0High1Medium11Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Pkp Web Application Library to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-5893
8.8
0%
Nov 1
Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
Affected: before 3.3.0-16
CVE-2023-5904
5.4
0%
Nov 1
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
Affected: through 3.3.0-15
CVE-2023-5903
5.4
0%
Nov 1
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
Affected: through 3.3.0-15
CVE-2023-5896
5.4
0%
Nov 1
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
Affected: before 3.4.0-4
CVE-2023-5895
5.4
0%
Nov 1
Cross-site Scripting (XSS) - DOM in pkp/pkp-lib
Affected: before 3.3.0-16
CVE-2023-5891
5.4
0%
Nov 1
Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib
Affected: before 3.3.0-16
CVE-2023-5892
5.4
0%
Nov 1
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
Affected: before 3.3.0-16
CVE-2023-5890
5.4
0%
Nov 1
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
Affected: before 3.3.0-16
CVE-2023-47271
5.3
1%
Nov 5
PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file named in an XML…
Affected: before 3.3.0-16
CVE-2023-5901
4.8
0%
Nov 1
Cross-site Scripting in pkp/pkp-lib
Affected: before 3.3.0-16
CVE-2023-5900
4.3
0%
Nov 1
Cross-Site Request Forgery in pkp/pkp-lib
Affected: before 3.3.0-16
CVE-2023-5902
4.3
0%
Nov 1
Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
Affected: through 3.3.0-15
Showing 12