CVE-2025-13469: Public Knowledge Project omp/ojs Payment Instructions Setting paymentForm.tpl cross site scripting
A security vulnerability has been detected in Public Knowledge Project omp and ojs 3.3.0/3.4.0/3.5.0. Impacted is an unknown function of the file plugins/paymethod/manual/templates/paymentForm.tpl of the component Payment Instructions Setting Handler. The manipulation of the argument manualInstructions leads to cross site scripting. The attack can be initiated remotely. You should upgrade the affected component.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13469?
CVE-2025-13469 has a critical severity due to its potential impact on payment processing security.
How do I fix CVE-2025-13469?
To fix CVE-2025-13469, upgrade Public Knowledge Project OMP and OJS to version 3.5.1 or higher.
What components are affected by CVE-2025-13469?
CVE-2025-13469 affects the Payment Instructions Setting Handler in the paymentForm.tpl file.
What versions are impacted by CVE-2025-13469?
CVE-2025-13469 impacts Public Knowledge Project OMP and OJS versions 3.3.0 to 3.5.0.
What type of vulnerability is CVE-2025-13469?
CVE-2025-13469 is a security vulnerability related to improper input handling in a payment processing function.