Sfu Pkp Web Application Library
12 CVEs affecting Sfu Pkp Web Application Library. Latest disclosed: 2023-11-07. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-5893 | High | 8.8 | 2023-11-01 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-5904 | Medium | 5.4 | 2023-11-07 | Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-5903 | Medium | 5.4 | 2023-11-07 | Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-5896 | Medium | 5.4 | 2023-11-01 | Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4. |
CVE-2023-5895 | Medium | 5.4 | 2023-11-01 | Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-5892 | Medium | 5.4 | 2023-11-01 | Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-5891 | Medium | 5.4 | 2023-11-01 | Cross-site Scripting (XSS) - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-5890 | Medium | 5.4 | 2023-11-01 | Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-47271 | Medium | 5.3 | 2023-11-06 | PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not verify that the file n… |
CVE-2023-5902 | Medium | 4.3 | 2023-11-07 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-5901 | Low | 3.5 | 2023-11-07 | Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-5900 | Low | 3.5 | 2023-11-07 | Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |