CVE-2024-24512: XSS
Published Mar 1, 2024
·Updated
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle component.
Affected Software
2 affected components
pkp Ojs
Pkp.sfu Open Journal Systems=3.3
Event History
Mar 1, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-24512?
CVE-2024-24512 is considered a high severity vulnerability due to its potential to execute arbitrary code.
2
How do I fix CVE-2024-24512?
To mitigate CVE-2024-24512, upgrade to the latest version of PKP Open Journal Systems that addresses this vulnerability.
3
Which versions of PKP Open Journal Systems are affected by CVE-2024-24512?
CVE-2024-24512 affects PKP Open Journal Systems version 3.4 and below.
4
What type of vulnerability is CVE-2024-24512?
CVE-2024-24512 is a Cross Site Scripting (XSS) vulnerability.
5
Can CVE-2024-24512 lead to data breaches?
Yes, exploiting CVE-2024-24512 can potentially lead to data breaches by allowing attackers to execute malicious scripts.