CVE-2024-25436: XSS

Published Mar 1, 2024

Updated

A cross-site scripting (XSS) vulnerability in the Production module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Discussion function.

Affected Software

1 affected component

Sfu Open Journal Systems=3.3

Event History

Mar 1, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·11:15 PM

Description

Frequently Asked Questions

What is the severity of CVE-2024-25436?

CVE-2024-25436 is classified as a cross-site scripting (XSS) vulnerability, which can have a high severity due to its potential to execute arbitrary scripts.

How do I fix CVE-2024-25436?

To fix CVE-2024-25436, update the Pkp Ojs software to the latest version that addresses this vulnerability.

What software is affected by CVE-2024-25436?

CVE-2024-25436 affects the Public Knowledge Project Open Journal Systems version 3.3.

What type of attack can exploit CVE-2024-25436?

CVE-2024-25436 can be exploited through cross-site scripting (XSS), allowing attackers to inject malicious scripts into web pages.

Where is the vulnerability located in CVE-2024-25436?

The vulnerability in CVE-2024-25436 is located in the Production module under the Add Discussion function.