Login Request a demo
PK
Vendor
pkp
8 products with CVEs on record
34
CVEs
0
On KEV
1
New 30D
Products
OJ
Open Journal Systems
PKP
8.8
8 CVEs0 on KEV1 new
PK
pkp/pkp-lib
pkp
8.8
15 CVEs0 on KEV0 new
PW
Pkp Web Application Library
Pkp
8.8
3 CVEs0 on KEV0 new
PK
Pkb-lib
Pkp
8.1
2 CVEs0 on KEV0 new
PK
pkp-lib
pkp
4.7
2 CVEs0 on KEV0 new
PK
pkp/ojs
pkp
8.8
2 CVEs0 on KEV0 new
OJ
ojs
pkp
6.1
1 CVEs0 on KEV0 new
PK
pkp/customLocale
pkp
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-111609
OJ
Open Journal Systems
PKP
3.8
0%
Oct 16PKP Open Journal Systems through 3.5.0-5 Cross-Journal Subscription IDOR via updateSubscription
CVE-2026-76572
PK
pkp-lib
pkp
4.7
0%
Aug 19pkp pkp-lib XSLTransformer.php _transformPHP xml external entity reference
CVE-2026-19906
PK
pkp-lib
pkp
3.7
0%
Aug 15pkp pkp-lib API Key Generation APIProfileForm.php setData entropy
CVE-2024-46326
PK
Pkb-lib
Pkp
6.1
0%
Oct 21Public Knowledge Project pkp-lib 3.4.0-7 and earlier is vulnerable to Open redirect due to a lack of input sanitization in the logout function
CVE-2024-7902
OJ
ojs
pkp
6.1
0%
Aug 17pkp ojs signOut redirect
CVE-2024-24512
OJ
Open Journal Systems
Pkp
6.1
1%
Mar 1Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle component
CVE-2024-25438
OJ
Open Journal Systems
Pkp
6.1
0%
Mar 1A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into…
CVE-2024-24511
OJ
Open Journal Systems
Pkp
6.1
1%
Mar 1Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component
CVE-2023-5904
PK
pkp/pkp-lib
pkp
5.4
0%
Nov 1Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
CVE-2023-5903
PK
pkp/pkp-lib
pkp
5.4
0%
Nov 1Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
CVE-2023-5900
PK
pkp/pkp-lib
pkp
4.3
0%
Nov 1Cross-Site Request Forgery in pkp/pkp-lib
CVE-2023-5901
PK
pkp/pkp-lib
pkp
4.8
0%
Nov 1Cross-site Scripting in pkp/pkp-lib
CVE-2023-5897
PK
pkp/customLocale
pkp
8.8
0%
Nov 1Cross-Site Request Forgery (CSRF) in pkp/customLocale
CVE-2023-5898
PK
pkp/pkp-lib
pkp
8.8
0%
Nov 1Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
CVE-2023-5902
PK
pkp/pkp-lib
pkp
4.3
0%
Nov 1Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
CVE-2023-5896
PK
pkp/pkp-lib
pkp
5.4
0%
Nov 1Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
CVE-2023-5899
PK
pkp/pkp-lib
pkp
8.8
0%
Nov 1Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
CVE-2023-5895
PK
pkp/pkp-lib
pkp
5.4
0%
Nov 1Cross-site Scripting (XSS) - DOM in pkp/pkp-lib
CVE-2023-5894
PK
pkp/ojs
pkp
5.4
0%
Nov 1Cross-site Scripting (XSS) - Stored in pkp/ojs
CVE-2023-5889
PK
pkp/pkp-lib
pkp
8.2
0%
Nov 1Insufficient Session Expiration in pkp/pkp-lib
CVE-2023-5891
PK
pkp/pkp-lib
pkp
5.4
0%
Nov 1Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib
CVE-2023-5892
PK
pkp/pkp-lib
pkp
5.4
0%
Nov 1Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
CVE-2023-5893
PK
pkp/pkp-lib
pkp
8.8
0%
Nov 1Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
CVE-2023-5890
PK
pkp/pkp-lib
pkp
5.4
0%
Nov 1Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
CVE-2023-5626
PK
pkp/ojs
pkp
8.8
0%
Oct 17Cross-Site Request Forgery (CSRF) in pkp/ojs
CVE-2023-4695
PK
pkp/pkp-lib
pkp
8.1
1%
Sep 1Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib
CVE-2012-1469
OJ
Open Journal Systems
Pkp
–
3%
Sep 6Multiple cross-site scripting (XSS) vulnerabilities in Open Journal Systems before 2.3.7 allow remote attackers and remote authenticated users to inject arbitrary web script or…
CVE-2012-1468
OJ
Open Journal Systems
Pkp
–
3%
Sep 6Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote authenticated users with the Author Role permission to execute arbitrary code by uploading a…
CVE-2012-1467
OJ
Open Journal Systems
Pkp
–
3%
Sep 6Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open Journal Systems before 2.3.7, allow remote authenticated users to (1) delete or (2)…