Pkp Pkp-lib vulnerabilities

• pkp pkp-lib pkp pkp-lib XSLTransformer.php _transformPHP xml external entity reference CVE-2026-76572 5.1 MediumAugust 19, 2026
• pkp pkp-lib pkp pkp-lib API Key Generation APIProfileForm.php setData entropy CVE-2026-19906 6.3 MediumAugust 15, 2026
• pkp pkp/pkp-lib, sfu pkp web application library +1 more Cross-site Scripting (XSS) - Stored in pkp/pkp-lib CVE-2023-5904 2.7 LowNovember 1, 2023
• pkp pkp/pkp-lib, sfu pkp web application library +1 more Cross-site Scripting (XSS) - Stored in pkp/pkp-lib CVE-2023-5903 2.7 LowNovember 1, 2023
• pkp pkp/pkp-lib, sfu pkp web application library +1 more Cross-site Scripting in pkp/pkp-lib CVE-2023-5901 3.5 LowNovember 1, 2023
• pkp pkp/pkp-lib, sfu pkp web application library +1 more Cross-Site Request Forgery in pkp/pkp-lib CVE-2023-5900 3.5 LowNovember 1, 2023
• pkp pkp/pkp-lib, sfu pkp web application library +1 more Cross-Site Request Forgery (CSRF) in pkp/pkp-lib CVE-2023-5902 4.3 MediumNovember 1, 2023
• pkp pkp/pkp-lib, web application library +1 more Cross-Site Request Forgery (CSRF) in pkp/pkp-lib CVE-2023-5899 3.5 LowNovember 1, 2023
• pkp pkp/pkp-lib, web application library +1 more Cross-Site Request Forgery (CSRF) in pkp/pkp-lib CVE-2023-5898 3.5 LowNovember 1, 2023
• pkp pkp/pkp-lib, sfu pkp web application library +1 more Cross-site Scripting (XSS) - Stored in pkp/pkp-lib CVE-2023-5896 2.7 LowNovember 1, 2023
• pkp pkp/pkp-lib, sfu pkp web application library +1 more Cross-site Scripting (XSS) - DOM in pkp/pkp-lib CVE-2023-5895 3.5 LowNovember 1, 2023
• pkp pkp/pkp-lib, sfu pkp web application library +1 more Cross-Site Request Forgery (CSRF) in pkp/pkp-lib CVE-2023-5893 3.5 LowNovember 1, 2023
• pkp pkp/pkp-lib, sfu pkp web application library +1 more Cross-site Scripting (XSS) - Stored in pkp/pkp-lib CVE-2023-5892 5.4 MediumNovember 1, 2023
• pkp pkp/pkp-lib, sfu pkp web application library +1 more Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib CVE-2023-5891 5.4 MediumNovember 1, 2023
• pkp pkp/pkp-lib, sfu pkp web application library +1 more Cross-site Scripting (XSS) - Stored in pkp/pkp-lib CVE-2023-5890 4.6 MediumNovember 1, 2023
• pkp pkp/pkp-lib, web application library +1 more Insufficient Session Expiration in pkp/pkp-lib CVE-2023-5889 4.3 MediumNovember 1, 2023
• pkp pkp/pkp-lib, pkb-lib +1 more Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib CVE-2023-4695 9.6 CriticalSeptember 1, 2023