Skip to content
Pkp vulnerabilities
Newest
-
open journal systems journal systems, pkp open journal systems +1 more
PKP Open Journal Systems through 3.5.0-5 Cross-Journal Subscription IDOR via updateSubscription
CVE-2026-111609
5.1 Medium
-
pkp pkp-lib
pkp pkp-lib XSLTransformer.php _transformPHP xml external entity reference
CVE-2026-76572
5.1 Medium
-
pkp pkp-lib
pkp pkp-lib API Key Generation APIProfileForm.php setData entropy
CVE-2026-19906
6.3 Medium
-
pkp pkb-lib
Public Knowledge Project pkp-lib 3.4.0-7 and earlier is vulnerable to Open redirect due to a lack...
CVE-2024-46326
6.1 Medium
-
pkp ojs, public knowledge project open journal systems +1 more
pkp ojs signOut redirect
CVE-2024-7902
6.9 Medium
-
pkp open journal systems
A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3 allows...
CVE-2024-25438
6.1 Medium
-
pkp open journal systems
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code...
CVE-2024-24512
6.1 Medium
-
pkp open journal systems
Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code...
CVE-2024-24511
6.1 Medium
-
pkp pkp/pkp-lib, sfu pkp web application library +1 more
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
CVE-2023-5904
2.7 Low
-
pkp pkp/pkp-lib, sfu pkp web application library +1 more
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
CVE-2023-5903
2.7 Low
-
pkp pkp/pkp-lib, sfu pkp web application library +1 more
Cross-site Scripting in pkp/pkp-lib
CVE-2023-5901
3.5 Low
-
pkp pkp/pkp-lib, sfu pkp web application library +1 more
Cross-Site Request Forgery in pkp/pkp-lib
CVE-2023-5900
3.5 Low
-
pkp pkp/pkp-lib, sfu pkp web application library +1 more
Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
CVE-2023-5902
4.3 Medium
-
pkp pkp/pkp-lib, web application library +1 more
Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
CVE-2023-5899
3.5 Low
-
pkp pkp/pkp-lib, web application library +1 more
Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
CVE-2023-5898
3.5 Low
-
pkp pkp/customlocale, sfu customlocale +1 more
Cross-Site Request Forgery (CSRF) in pkp/customLocale
CVE-2023-5897
6.3 Medium
-
pkp pkp/pkp-lib, sfu pkp web application library +1 more
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
CVE-2023-5896
2.7 Low
-
pkp pkp/pkp-lib, sfu pkp web application library +1 more
Cross-site Scripting (XSS) - DOM in pkp/pkp-lib
CVE-2023-5895
3.5 Low
-
pkp pkp/ojs, sfu open journal systems +1 more
Cross-site Scripting (XSS) - Stored in pkp/ojs
CVE-2023-5894
3.5 Low
-
pkp pkp/pkp-lib, sfu pkp web application library +1 more
Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
CVE-2023-5893
3.5 Low
-
pkp pkp/pkp-lib, sfu pkp web application library +1 more
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
CVE-2023-5892
5.4 Medium
-
pkp pkp/pkp-lib, sfu pkp web application library +1 more
Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib
CVE-2023-5891
5.4 Medium
-
pkp pkp/pkp-lib, sfu pkp web application library +1 more
Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
CVE-2023-5890
4.6 Medium
-
pkp pkp/pkp-lib, web application library +1 more
Insufficient Session Expiration in pkp/pkp-lib
CVE-2023-5889
4.3 Medium
-
pkp pkp/ojs, open journal systems, sfu open journal system +2 more
Cross-Site Request Forgery (CSRF) in pkp/ojs
CVE-2023-5626
3.5 Low
-
pkp pkp/pkp-lib, pkb-lib +1 more
Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib
CVE-2023-4695
9.6 Critical
-
pkp open journal systems
Multiple cross-site scripting (XSS) vulnerabilities in Open Journal Systems before 2.3.7 allow...
CVE-2012-1469
Public exploit
4.3 Medium
-
pkp open journal systems
Incomplete blacklist vulnerability in Open Journal Systems before 2.3.7 allows remote...
CVE-2012-1468
Public exploit
6.0 Medium
-
pkp open journal systems
Multiple directory traversal vulnerabilities in the iBrowser plugin library, as used in Open...
CVE-2012-1467
Public exploit
6.5 Medium