OJ
Product
Open Journal Systems
8
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 3Low 1
Watch
Add Open Journal Systems to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5626 | 8.8 | Oct 17 | Cross-Site Request Forgery (CSRF) in pkp/ojs Affected: before 3.3.0-16 |
| CVE-2024-24511 | 6.1 | Mar 1 | Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component Affected: 3.4 |
| CVE-2024-25438 | 6.1 | Mar 1 | A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into… Affected: 3.3 |
| CVE-2024-24512 | 6.1 | Mar 1 | Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle component Affected: 3.4 |
| CVE-2026-111609 | 3.8 | Oct 16 | PKP Open Journal Systems through 3.5.0-5 Cross-Journal Subscription IDOR via updateSubscription Affected: through 3.5.0-5 |
| CVE-2012-1469 | – | Sep 6 | Multiple cross-site scripting (XSS) vulnerabilities in Open Journal Systems before 2.3.7 allow remote attackers and remote authenticated users to inject arbitrary web script or… Affected: through 2.3.6 |
| CVE-2012-1468 | – | Sep 6 | Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with the Author Role permission to execute arbitrary code by uploading a… Affected: through 2.3.6 |
| CVE-2012-1467 | – | Sep 6 | Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3.7, allow remote authenticated users to (1) delete or (2)… Affected: through 2.3.6 |
Showing 8