CVE-2024-24511: XSS
Published Mar 1, 2024
·Updated
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component.
Affected Software
2 affected components
pkp Ojs
Pkp.sfu Open Journal Systems=3.3
Event History
Mar 1, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-24511?
CVE-2024-24511 is classified as a high severity Cross Site Scripting vulnerability.
2
How do I fix CVE-2024-24511?
To fix CVE-2024-24511, update PKP Open Journal Systems to the latest version which includes a patch for this vulnerability.
3
What impact does CVE-2024-24511 pose to users?
CVE-2024-24511 allows attackers to execute arbitrary code, potentially compromising user data and application integrity.
4
Which versions of PKP Open Journal Systems are affected by CVE-2024-24511?
Versions prior to 3.4 of PKP Open Journal Systems are affected by CVE-2024-24511.
5
How can I determine if my system is vulnerable to CVE-2024-24511?
You can determine vulnerability by checking if your PKP Open Journal Systems version is below 3.4, particularly if it's version 3.3 or earlier.