Open Journal Systems
Approved changes feed: RSS · Atom
cpe:2.3:a:pkp:open_journal_systems:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Pkp (f7b5daee-50ee-5411-a8f0-bbd00d285ddc) |
|---|---|
| Product | Open Journal Systems (edc48f00-449e-5bd2-8544-84a82d43ce88) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:composer/pkp/ojs |
purl2cpe | 2026-06-01 10:11:35.493020 |
pkg:github/pkp/ojs |
purl2cpe | 2026-06-01 10:11:35.493022 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-25438 |
vulnerable | 2026-06-08 06:31:22.948687 |
Details available
A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Discussion function.
Published: 2024-03-01T00:00:00.000Z
Updated: 2024-08-15T20:45:32.116Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24512 |
vulnerable | 2026-06-08 06:29:41.449131 |
Details available
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle component.
Published: 2024-03-01T00:00:00.000Z
Updated: 2024-08-15T20:46:24.067Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24511 |
vulnerable | 2026-06-08 06:29:41.446883 |
Details available
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component.
Published: 2024-03-01T00:00:00.000Z
Updated: 2024-08-06T15:13:53.112Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5626 |
vulnerable | 2026-06-08 06:19:44.192269 |
Cross-Site Request Forgery (CSRF) in pkp/ojs
LOW (3.5)
Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16.
Published: 2023-10-17T23:22:41.615Z
Updated: 2024-09-13T16:20:28.980Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1469 |
vulnerable | 2026-06-08 05:00:48.875457 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Open Journal Systems before 2.3.7 allow remote attackers and remote authenticated users to inject arbitrary web script or HTML via the (1) editor or (2) callback parameters to lib/pkp/lib/tinymce/jscripts/tiny_mce/plugins/ibrowser/ibrowser.php in the iBrowser plugin, (3) authors[][url] parameter to index.php, or (4) Bio Statement or (5) Abstract of Submission fields to the stripUnsafeHtml function in lib/pkp/classes/core/String.inc.php.
Published: 2012-09-06T21:00:00.000Z
Updated: 2024-08-06T19:01:01.394Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1468 |
vulnerable | 2026-06-08 05:00:48.875019 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1467 |
vulnerable | 2026-06-08 05:00:48.874625 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.