Latest vulnerabilities for "pkp web application library"

Where

Sort:

Versions

3.3.0-15

Sfu Pkp Web Application LibraryPKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal System…

Risk 27

Severity

5.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file named in an XML document (used for the native import/export plugin) is an image file, before trying to use it for an issue cover image.

First published (updated )

CVE-2023-47271

Sfu Pkp Web Application LibraryCross-site Scripting (XSS) - Stored in pkp/pkp-lib

Risk 25

Severity

5.4

EPSS

0.04%

XSS

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

First published (updated )

CVE-2023-5904

Sfu Pkp Web Application LibraryCross-Site Request Forgery in pkp/pkp-lib

Risk 16

Severity

4.3

EPSS

0.05%

CSRF

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

First published (updated )

CVE-2023-5900

Sfu Pkp Web Application LibraryCross-site Scripting (XSS) - Stored in pkp/pkp-lib

Risk 25

Severity

5.4

EPSS

0.04%

XSS

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

First published (updated )

CVE-2023-5903

Sfu Pkp Web Application LibraryCross-site Scripting in pkp/pkp-lib

Risk 22

Severity

4.8

EPSS

0.04%

XSS

AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

First published (updated )

CVE-2023-5901

Sfu Pkp Web Application LibraryCross-site Scripting (XSS) - Stored in pkp/pkp-lib

Risk 25

Severity

5.4

EPSS

0.04%

XSS

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4.

First published (updated )

CVE-2023-5896

pkp Pkp Web Application LibraryCross-Site Request Forgery (CSRF) in pkp/pkp-lib

Risk 56

Severity

8.8

EPSS

0.06%

CSRF

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

First published (updated )

CVE-2023-5899

pkp Pkp Web Application LibraryCross-Site Request Forgery (CSRF) in pkp/pkp-lib

Risk 56

Severity

8.8

EPSS

0.06%

CSRF

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

First published (updated )

CVE-2023-5898

Sfu Pkp Web Application LibraryCross-Site Request Forgery (CSRF) in pkp/pkp-lib

Risk 16

Severity

4.3

EPSS

0.05%

CSRF

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

First published (updated )

CVE-2023-5902

Sfu Pkp Web Application LibraryCross-site Scripting (XSS) - DOM in pkp/pkp-lib

Risk 25

Severity

5.4

EPSS

0.04%

XSS

AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

First published (updated )

CVE-2023-5895

Sfu Pkp Web Application LibraryCross-site Scripting (XSS) - Reflected in pkp/pkp-lib

Risk 25

Severity

5.4

EPSS

0.04%

XSS

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Cross-site Scripting (XSS) - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

First published (updated )

CVE-2023-5891

Sfu Pkp Web Application LibraryCross-site Scripting (XSS) - Stored in pkp/pkp-lib

Risk 25

Severity

5.4

EPSS

0.04%

XSS

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

First published (updated )

CVE-2023-5890

pkp Pkp Web Application LibraryInsufficient Session Expiration in pkp/pkp-lib

Risk 38

Severity

8.2

EPSS

0.08%

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Insufficient Session Expiration in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

First published (updated )

CVE-2023-5889

Sfu Pkp Web Application LibraryCross-Site Request Forgery (CSRF) in pkp/pkp-lib

Risk 56

Severity

8.8

EPSS

0.06%

CSRF

AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

First published (updated )

CVE-2023-5893

Sfu Pkp Web Application LibraryCross-site Scripting (XSS) - Stored in pkp/pkp-lib

Risk 25

Severity

5.4

EPSS

0.04%

XSS

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

First published (updated )

CVE-2023-5892

Trending

Versions

Sfu Pkp Web Application LibraryPKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal System…

Sfu Pkp Web Application LibraryCross-site Scripting (XSS) - Stored in pkp/pkp-lib

Sfu Pkp Web Application LibraryCross-Site Request Forgery in pkp/pkp-lib

Sfu Pkp Web Application LibraryCross-site Scripting (XSS) - Stored in pkp/pkp-lib

Sfu Pkp Web Application LibraryCross-site Scripting in pkp/pkp-lib

Sfu Pkp Web Application LibraryCross-site Scripting (XSS) - Stored in pkp/pkp-lib

pkp Pkp Web Application LibraryCross-Site Request Forgery (CSRF) in pkp/pkp-lib

pkp Pkp Web Application LibraryCross-Site Request Forgery (CSRF) in pkp/pkp-lib

Sfu Pkp Web Application LibraryCross-Site Request Forgery (CSRF) in pkp/pkp-lib

Sfu Pkp Web Application LibraryCross-site Scripting (XSS) - DOM in pkp/pkp-lib

Sfu Pkp Web Application LibraryCross-site Scripting (XSS) - Reflected in pkp/pkp-lib

Sfu Pkp Web Application LibraryCross-site Scripting (XSS) - Stored in pkp/pkp-lib

pkp Pkp Web Application LibraryInsufficient Session Expiration in pkp/pkp-lib

Sfu Pkp Web Application LibraryCross-Site Request Forgery (CSRF) in pkp/pkp-lib

Sfu Pkp Web Application LibraryCross-site Scripting (XSS) - Stored in pkp/pkp-lib

Company

Resources

Contact