{"id":"CVE-2024-50965","aliases":["EUVD-2024-45121","GHSA-g45h-w7fr-cc7m"],"status":"published","title":"Cross Site Scripting vulnerability in Public Knowledge Project PKP Platform OJS/OMP/OPS- before v...","description":"Cross Site Scripting vulnerability in Public Knowledge Project PKP Platform OJS/OMP/OPS- before v.3.3.0.16 allows an attacker to execute arbitrary code and escalate privileges via a crafted script","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00377,"percentile":0.32006,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2024-11-22T00:00:00Z","modified":"2026-06-17T08:05:11Z","references":[{"url":"https://openjournaltheme.com/urgent-critical-vulnerabilities-in-3-3-0-18-upgrade-your-ojs-now/"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50965"},{"url":"https://openjournaltheme.com/urgent-critical-vulnerabilities-in-3-3-0-18-upgrade-your-ojs-now"},{"url":"https://github.com/advisories/GHSA-g45h-w7fr-cc7m"}],"sources":{"cve":[{"id":"CVE-2024-50965","description":"Cross Site Scripting vulnerability in Public Knowledge Project PKP Platform OJS/OMP/OPS- before v.3.3.0.16 allows an attacker to execute arbitrary code and escalate privileges via a crafted script","status":"published","published":"2024-11-22T00:00:00Z","modified":"2024-11-22T17:43:42.786Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:21.784174Z"}],"euvd":[{"id":"EUVD-2024-45121","description":"Cross Site Scripting vulnerability in Public Knowledge Project PKP Platform OJS/OMP/OPS- before v.3.3.0.16 allows an attacker to execute arbitrary code and escalate privileges via a crafted script","status":"published","published":"2024-11-22T00:00:00Z","modified":"2024-11-22T17:43:42Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-03T00:04:50.128137Z"}],"ghsa":[{"id":"GHSA-g45h-w7fr-cc7m","title":"Cross Site Scripting vulnerability in Public Knowledge Project PKP Platform OJS/OMP/OPS- before v...","description":"Cross Site Scripting vulnerability in Public Knowledge Project PKP Platform OJS/OMP/OPS- before v.3.3.0.16 allows an attacker to execute arbitrary code and escalate privileges via a crafted script","status":"published","published":"2024-11-22T21:32:15Z","modified":"2024-11-22T21:32:21Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:58:54.680763Z"}],"nvd":[{"id":"CVE-2024-50965","description":"Cross Site Scripting vulnerability in Public Knowledge Project PKP Platform OJS/OMP/OPS- before v.3.3.0.16 allows an attacker to execute arbitrary code and escalate privileges via a crafted script","status":"published","published":"2024-11-22T16:15:33.447Z","modified":"2026-06-17T08:05:11.53Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:10:37.996328Z"}]}}