PW
Product
Pkp Web Application Library
12
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 11Low 0
Watch
Add Pkp Web Application Library to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5904 | 5.4 | Nov 1 | Cross-site Scripting (XSS) - Stored in pkp/pkp-lib Affected: through 3.3.0-15 |
| CVE-2023-5903 | 5.4 | Nov 1 | Cross-site Scripting (XSS) - Stored in pkp/pkp-lib Affected: through 3.3.0-15 |
| CVE-2023-5896 | 5.4 | Nov 1 | Cross-site Scripting (XSS) - Stored in pkp/pkp-lib Affected: before 3.4.0-4 |
| CVE-2023-5895 | 5.4 | Nov 1 | Cross-site Scripting (XSS) - DOM in pkp/pkp-lib Affected: before 3.3.0-16 |
| CVE-2023-5891 | 5.4 | Nov 1 | Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib Affected: before 3.3.0-16 |
| CVE-2023-5892 | 5.4 | Nov 1 | Cross-site Scripting (XSS) - Stored in pkp/pkp-lib Affected: before 3.3.0-16 |
| CVE-2023-5890 | 5.4 | Nov 1 | Cross-site Scripting (XSS) - Stored in pkp/pkp-lib Affected: before 3.3.0-16 |
| CVE-2023-47271 | 5.3 | Nov 5 | PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file named in an XML… Affected: before 3.3.0-16 |
| CVE-2023-5901 | 4.8 | Nov 1 | Cross-site Scripting in pkp/pkp-lib Affected: before 3.3.0-16 |
| CVE-2023-5900 | 4.3 | Nov 1 | Cross-Site Request Forgery in pkp/pkp-lib Affected: before 3.3.0-16 |
| CVE-2023-5902 | 4.3 | Nov 1 | Cross-Site Request Forgery (CSRF) in pkp/pkp-lib Affected: through 3.3.0-15 |
Showing 11
