Show filters
25 Total Results
Displaying 11-20 of 25
Sort by:
Attacker Value
Unknown
CVE-2023-5900
Disclosure Date: November 07, 2023 (last updated January 21, 2024)
Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
0
Attacker Value
Unknown
CVE-2023-47271
Disclosure Date: November 06, 2023 (last updated November 15, 2023)
PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file named in an XML document (used for the native import/export plugin) is an image file, before trying to use it for an issue cover image.
0
Attacker Value
Unknown
CVE-2023-5897
Disclosure Date: November 01, 2023 (last updated November 09, 2023)
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/customLocale prior to 1.2.0-1.
0
Attacker Value
Unknown
CVE-2023-5896
Disclosure Date: November 01, 2023 (last updated November 07, 2023)
Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4.
0
Attacker Value
Unknown
CVE-2023-5895
Disclosure Date: November 01, 2023 (last updated November 09, 2023)
Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
0
Attacker Value
Unknown
CVE-2023-5894
Disclosure Date: November 01, 2023 (last updated November 09, 2023)
Cross-site Scripting (XSS) - Stored in GitHub repository pkp/ojs prior to 3.3.0-16.
0
Attacker Value
Unknown
CVE-2023-5893
Disclosure Date: November 01, 2023 (last updated November 09, 2023)
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
0
Attacker Value
Unknown
CVE-2023-5892
Disclosure Date: November 01, 2023 (last updated November 09, 2023)
Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
0
Attacker Value
Unknown
CVE-2023-5891
Disclosure Date: November 01, 2023 (last updated November 09, 2023)
Cross-site Scripting (XSS) - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
0
Attacker Value
Unknown
CVE-2023-5890
Disclosure Date: November 01, 2023 (last updated November 09, 2023)
Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
0
