PK
Vendor
Public Knowledge Project
10
CVEs
0
On KEV
0
New 30D
Products
OJ6.1
Open Journal Systems
Public Knowledge Project
5 CVEs0 on KEV0 new
OJ2.4
ojs
Public Knowledge Project
1 CVEs0 on KEV0 new
OM2.4
omp
Public Knowledge Project
1 CVEs0 on KEV0 new
OC–
Open Conference Systems
Public Knowledge Project
1 CVEs0 on KEV0 new
OH–
Open Harvester Systems
Public Knowledge Project
1 CVEs0 on KEV0 new
OM6.1
Open Monograph Press
Public Knowledge Project
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-13469 | OM omp Public Knowledge Project | 2.4 | Nov 20 | Public Knowledge Project omp/ojs Payment Instructions Setting paymentForm.tpl cross site scripting |
| CVE-2024-7902 | OJ Open Journal Systems Public Knowledge Project | 6.1 | Aug 17 | A vulnerability was found in pkp ojs up to 3.4.0-6 and classified as problematic |
| CVE-2024-25438 | OJ Open Journal Systems Public Knowledge Project | 6.1 | Mar 1 | A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into… |
| CVE-2022-26616 | OJ Open Journal Systems Public Knowledge Project | 6.1 | Apr 4 | PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting (XSS) attacks via crafted HTTP headers |
| CVE-2022-24181 | OJ Open Journal Systems Public Knowledge Project | 6.1 | Apr 1 | Cross-site scripting (XSS) via Host Header injection in PKP Open Journals System 2.4.8 >= 3.3 allows remote attackers to inject arbitary code via the X-Forwarded-Host Header |
| CVE-2018-12588 | OM Open Monograph Press Public Knowledge Project | 6.1 | Jun 19 | Cross-site scripting (XSS) vulnerability in templates/frontend/pages/searchResults.tpl in Public Knowledge Project (PKP) Open Monograph Press (OMP) v1.2.0 through 3.1.1-2 before… |
| CVE-2011-5197 | OH Open Harvester Systems Public Knowledge Project | – | Sep 23 | Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester Systems 2.3.1 and earlier allows remote attackers to hijack… |
| CVE-2011-5196 | OJ Open Journal Systems Public Knowledge Project | – | Sep 23 | Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack… |
| CVE-2011-5195 | OC Open Conference Systems Public Knowledge Project | – | Sep 23 | Cross-site request forgery (CSRF) vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and earlier allows remote attackers to hijack… |