SF
Vendor
Sfu
4 products with CVEs on record
18
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2024-25436
OJ
Open Journal Systems
Sfu
6.1
0%
Mar 1A cross-site scripting (XSS) vulnerability in the Production module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into…
CVE-2023-47271
PW
Pkp Web Application Library
Sfu
5.3
1%
Nov 5PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file named in an XML…
CVE-2023-5904
PW
Pkp Web Application Library
Sfu
5.4
0%
Nov 1Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
CVE-2023-5903
PW
Pkp Web Application Library
Sfu
5.4
0%
Nov 1Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
CVE-2023-5900
PW
Pkp Web Application Library
Sfu
4.3
0%
Nov 1Cross-Site Request Forgery in pkp/pkp-lib
CVE-2023-5901
PW
Pkp Web Application Library
Sfu
4.8
0%
Nov 1Cross-site Scripting in pkp/pkp-lib
CVE-2023-5897
CU
Customlocale
Sfu
8.8
0%
Nov 1Cross-Site Request Forgery (CSRF) in pkp/customLocale
CVE-2023-5902
PW
Pkp Web Application Library
Sfu
4.3
0%
Nov 1Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
CVE-2023-5896
PW
Pkp Web Application Library
Sfu
5.4
0%
Nov 1Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
CVE-2023-5895
PW
Pkp Web Application Library
Sfu
5.4
0%
Nov 1Cross-site Scripting (XSS) - DOM in pkp/pkp-lib
CVE-2023-5894
OJ
Open Journal Systems
Sfu
5.4
0%
Nov 1Cross-site Scripting (XSS) - Stored in pkp/ojs
CVE-2023-5891
PW
Pkp Web Application Library
Sfu
5.4
0%
Nov 1Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib
CVE-2023-5892
PW
Pkp Web Application Library
Sfu
5.4
0%
Nov 1Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
CVE-2023-5893
PW
Pkp Web Application Library
Sfu
8.8
0%
Nov 1Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
CVE-2023-5890
PW
Pkp Web Application Library
Sfu
5.4
0%
Nov 1Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
CVE-2023-5626
OJ
Open Journal System
Sfu
8.8
0%
Oct 17Cross-Site Request Forgery (CSRF) in pkp/ojs
CVE-2019-19909
OJ
Open Journal System
Sfu
8.8
1%
Dec 19An issue was discovered in Public Knowledge Project (PKP) pkp-lib before 3.1.2-2, as used in Open Journal Systems (OJS) before 3.1.2-2
CVE-2018-12229
OJ
Open Journal System
Sfu
6.1
2%
Jun 12Cross-site scripting (XSS) vulnerability in Public Knowledge Project (PKP) Open Journal System (OJS) 3.0.0 to 3.1.1-1 allows remote attackers to inject arbitrary web script or…