CVE-2023-5894: Cross-site Scripting (XSS) - Stored in pkp/ojs
Cross-site Scripting (XSS) - Stored in GitHub repository pkp/ojs prior to 3.3.0-16.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-5894.
What is the title of this vulnerability?
The title of this vulnerability is Cross-site Scripting (XSS) - Stored in pkp/ojs.
What is the description of this vulnerability?
The description of this vulnerability is Cross-site Scripting (XSS) - Stored in GitHub repository pkp/ojs prior to 3.3.0-16.
What software is affected by this vulnerability?
The software affected by this vulnerability is Sfu Open Journal Systems version up to exclusive 3.3.0-16.
What is the severity of this vulnerability?
The severity of this vulnerability is medium with a CVSS score of 5.4.
How can I fix this vulnerability?
To fix this vulnerability, update the pkp/ojs software to version 3.3.0-16 or higher.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following references: [Huntr](https://huntr.com/bounties/aba3ba5b-aa6b-4076-b663-4237b4a0761d), [GitHub Commit](https://github.com/pkp/ojs/commit/66927de1a82e3a3004db9741d1505ddac0980e63)
What is the CWE ID of this vulnerability?
The CWE ID of this vulnerability is CWE-79.