Skip to content
OpenAdvisories

Archive

1 November 2023

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Low 2.6

    PopojiCMS Web Config install.php cross site scripting

    A vulnerability was found in PopojiCMS 2.0.1 and classified as problematic. This issue affects some unknown processing of the file install.php of the component Web Config. The manipulation of the argument Site Title with the input <script>alert(1)</script> le…

  • Low 2.7

    Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the…

  • Low 2.7

    Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

    Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

  • Low 3.5

    Cross-site Scripting in pkp/pkp-lib

    Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

  • Low 3.5

    Cross-Site Request Forgery in pkp/pkp-lib

    Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

  • Low 2.7

    Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

    Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

  • Low 3.5

    Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

    Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

  • Low 3.5

    Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

    Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

  • Low 2.7

    Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

    Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4.

  • Low 3.5

    Cross-site Scripting (XSS) - DOM in pkp/pkp-lib

    Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

  • Low 3.5

    Cross-site Scripting (XSS) - Stored in pkp/ojs

    Cross-site Scripting (XSS) - Stored in GitHub repository pkp/ojs prior to 3.3.0-16.

  • Low 3.5

    Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

    Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.