Show filters
15 Total Results
Displaying 1-10 of 15
Sort by:
Attacker Value
Unknown

CVE-2023-5904

Disclosure Date: November 07, 2023 (last updated November 14, 2023)
Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Attacker Value
Unknown

CVE-2023-5903

Disclosure Date: November 07, 2023 (last updated November 14, 2023)
Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Attacker Value
Unknown

CVE-2023-5902

Disclosure Date: November 07, 2023 (last updated November 14, 2023)
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Attacker Value
Unknown

CVE-2023-5901

Disclosure Date: November 07, 2023 (last updated November 16, 2023)
Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Attacker Value
Unknown

CVE-2023-5900

Disclosure Date: November 07, 2023 (last updated January 21, 2024)
Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Attacker Value
Unknown

CVE-2023-47271

Disclosure Date: November 06, 2023 (last updated November 15, 2023)
PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file named in an XML document (used for the native import/export plugin) is an image file, before trying to use it for an issue cover image.
Attacker Value
Unknown

CVE-2023-5899

Disclosure Date: November 01, 2023 (last updated November 08, 2023)
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Attacker Value
Unknown

CVE-2023-5898

Disclosure Date: November 01, 2023 (last updated November 08, 2023)
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Attacker Value
Unknown

CVE-2023-5896

Disclosure Date: November 01, 2023 (last updated November 07, 2023)
Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4.
Attacker Value
Unknown

CVE-2023-5895

Disclosure Date: November 01, 2023 (last updated November 09, 2023)
Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16.