CVE-2024-50965: XSS
Cross Site Scripting vulnerability in Public Knowledge Project PKP Platform OJS/OMP/OPS- before v.3.3.0.16 allows an attacker to execute arbitrary code and escalate privileges via a crafted script
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50965?
CVE-2024-50965 is considered a critical severity vulnerability due to its potential for arbitrary code execution and privilege escalation.
How do I fix CVE-2024-50965?
To fix CVE-2024-50965, you should upgrade to Public Knowledge Project PKP Platform OJS/OMP/OPS version 3.3.0.16 or later.
What kind of attack can be executed through CVE-2024-50965?
CVE-2024-50965 allows attackers to execute arbitrary scripts, leading to possible data theft or unauthorized actions on the system.
Is my installation vulnerable to CVE-2024-50965?
If you are using Public Knowledge Project PKP Platform OJS/OMP/OPS versions prior to 3.3.0.16, your installation is vulnerable to CVE-2024-50965.
Who is affected by CVE-2024-50965?
CVE-2024-50965 affects users of Public Knowledge Project PKP Platform OJS, OMP, and OPS versions below 3.3.0.16.