PT-2023-32401 · Pkp/Ojs · Pkp Ojs

CVE-2023-5894

Published

2023-10-31

Updated

2023-11-08

CVSS v3.1

3.5

Low

Vector

AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions pkp/ojs versions prior to 3.3.0-16

Description The issue is related to Cross-site Scripting (XSS) - Stored, which affects the GitHub repository pkp/ojs.

Recommendations For versions prior to 3.3.0-16, update to version 3.3.0-16 or later to resolve the issue.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2023-5894

Pkp Ojs