PK
Vendor
Pkp.sfu
3
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-24511 | OJ Open Journal Systems Pkp.sfu | 6.1 | Mar 1 | Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component |
| CVE-2024-24512 | OJ Open Journal Systems Pkp.sfu | 6.1 | Mar 1 | Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle component |
| CVE-2024-25434 | OJ Open Journal Systems Pkp.sfu | 5.4 | Mar 1 | A cross-site scripting (XSS) vulnerability in Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Publicname parameter |
