OJ
Product
Open Journal Systems
5
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch
Add Open Journal Systems to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-7902 | 6.1 | Aug 17 | A vulnerability was found in pkp ojs up to 3.4.0-6 and classified as problematic Affected: through 3.4.0-6 |
| CVE-2024-25438 | 6.1 | Mar 1 | A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into… Affected: 3.3.0-0 |
| CVE-2022-26616 | 6.1 | Apr 4 | PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting (XSS) attacks via crafted HTTP headers Affected: 2.4.8 before 3.3.0-9 |
| CVE-2022-24181 | 6.1 | Apr 1 | Cross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 >= 3.3 allows remote attackers to inject arbitary code via the X-Forwarded-Host Header Affected: 2.4.8 through 3.3 |
| CVE-2011-5196 | – | Sep 23 | Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack… Affected: through 2.3.6; 1.0; 1.0.1; 1.1; 1.1.5; 1.1.6; +24 more |
Showing 5