VendorsSfupkp_web_application_libraryany version
Vulnerabilities

Sfu Simon Fraser University PKP Web Application Library (pkp-lib) any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

12CVEs
CVE-2023-5893
Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
Published 2023-11-01 · Modified
8.8EPSS 0.003
CVE-2023-5903
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
Published 2023-11-01 · Modified
5.4EPSS 0.004
CVE-2023-5904
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
Published 2023-11-01 · Modified
5.4EPSS 0.004
CVE-2023-5895
Cross-site Scripting (XSS) - DOM in pkp/pkp-lib
Published 2023-11-01 · Modified
5.4EPSS 0.004
CVE-2023-5890
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
Published 2023-11-01 · Modified
5.4EPSS 0.004
CVE-2023-5891
Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib
Published 2023-11-01 · Modified
5.4EPSS 0.004
CVE-2023-5892
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
Published 2023-11-01 · Modified
5.4EPSS 0.004
CVE-2023-5896
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
Published 2023-11-01 · Modified
5.4EPSS 0.003
CVE-2023-47271
PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file named in an XML document (used for the native import/export plugin) is an image file, before trying to use it for an issue cover image.
Published 2023-11-05 · Modified
5.3EPSS 0.006
CVE-2023-5901
Cross-site Scripting in pkp/pkp-lib
Published 2023-11-01 · Modified
4.8EPSS 0.005
CVE-2023-5902
Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
Published 2023-11-01 · Modified
4.3EPSS 0.003
CVE-2023-5900
Cross-Site Request Forgery in pkp/pkp-lib
Published 2023-11-01 · Modified
4.3EPSS 0.002