CVE-2023-5896: Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this cross-site scripting (XSS) vulnerability?
The vulnerability ID for this cross-site scripting (XSS) vulnerability is CVE-2023-5896.
How severe is the cross-site scripting (XSS) vulnerability (CVE-2023-5896)?
The severity of the cross-site scripting (XSS) vulnerability (CVE-2023-5896) is medium, with a severity score of 5.4.
What is the affected software for the cross-site scripting (XSS) vulnerability (CVE-2023-5896)?
The affected software for the cross-site scripting (XSS) vulnerability (CVE-2023-5896) is Sfu Pkp Web Application Library prior to 3.4.0-4.
How can I fix the cross-site scripting (XSS) vulnerability (CVE-2023-5896)?
To fix the cross-site scripting (XSS) vulnerability (CVE-2023-5896), you should update the Sfu Pkp Web Application Library to version 3.4.0-4 or later.
Where can I find more information about the cross-site scripting (XSS) vulnerability (CVE-2023-5896)?
You can find more information about the cross-site scripting (XSS) vulnerability (CVE-2023-5896) at the following references: [https://huntr.com/bounties/a1f05be5-24ed-4ec5-9858-fce4233f7bb1](https://huntr.com/bounties/a1f05be5-24ed-4ec5-9858-fce4233f7bb1), [https://github.com/pkp/pkp-lib/commit/18b318f83105ffa7fa214179f8e20507b0754236](https://github.com/pkp/pkp-lib/commit/18b318f83105ffa7fa214179f8e20507b0754236)