CVE-2018-12588: XSS
Cross-site scripting (XSS) vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project (PKP) Open Monograph Press (OMP) v1.2.0 through 3.1.1-2 before 3.1.1-3 allows remote attackers to inject arbitrary web script or HTML via the catalog.noTitlesSearch parameter (aka the Search field).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2018-12588?
The severity of CVE-2018-12588 is classified as high due to its potential for remote code execution through cross-site scripting.
How do I fix CVE-2018-12588?
To mitigate CVE-2018-12588, it is recommended to upgrade Public Knowledge Project Open Monograph Press to version 3.1.1-3 or later.
What versions of Public Knowledge Project Open Monograph Press are affected by CVE-2018-12588?
CVE-2018-12588 affects versions 1.2.0 through 3.1.1-2 of Public Knowledge Project Open Monograph Press.
Can CVE-2018-12588 be exploited by an unauthenticated user?
Yes, CVE-2018-12588 can be exploited by unauthenticated users who can send crafted requests to the vulnerable application.
What type of vulnerability is CVE-2018-12588?
CVE-2018-12588 is classified as a cross-site scripting (XSS) vulnerability.