CVE-2024-25434: XSS
Published Mar 1, 2024
·Updated
A cross-site scripting (XSS) vulnerability in Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Publicname parameter.
Affected Software
2 affected components
pkp Ojs
Pkp.sfu Open Journal Systems=3.3
Event History
Mar 1, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-25434?
CVE-2024-25434 is classified as a high severity cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2024-25434?
To fix CVE-2024-25434, sanitize and validate user inputs in the Publicname parameter to prevent XSS attacks.
3
What software is affected by CVE-2024-25434?
CVE-2024-25434 affects PKP Open Journal Systems version 3.3.
4
What type of vulnerability is CVE-2024-25434?
CVE-2024-25434 is a cross-site scripting (XSS) vulnerability.
5
Can CVE-2024-25434 lead to data theft?
Yes, CVE-2024-25434 can allow attackers to execute arbitrary scripts, potentially leading to data theft.