Skip to content
OpenAdvisories

Vendor

pkp

22 known vulnerabilities.

Products

pkp/pkp-lib 15 pkp/ojs 2 pkp-lib 2 ojs 1 Open Journal Systems 1 pkp/customLocale 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 4.7
    CVE-2026-76572

    pkp pkp-lib XSLTransformer.php _transformPHP xml external entity reference

    A vulnerability was detected in pkp pkp-lib up to 3.3.0-22/3.4.0-10/3.5.0-4. The affected element is the function _transformPHP of the file classes/xslt/XSLTransformer.php. The manipulation results in xml external entity reference. The attack can be executed …

    pkp pkp-lib
  • Medium 4.3
    CVE-2024-7902

    pkp ojs signOut redirect

    A vulnerability was found in pkp ojs up to 3.4.0-6 and classified as problematic. Affected by this issue is some unknown functionality of the file /login/signOut. The manipulation of the argument source with the input .example.com leads to open redirect. The …

    pkp ojs
  • Medium 6.3
    CVE-2023-5897

    Cross-Site Request Forgery (CSRF) in pkp/customLocale

    Cross-Site Request Forgery (CSRF) in GitHub repository pkp/customLocale prior to 1.2.0-1.

    pkp pkp/customLocale
  • Medium 4.3
    CVE-2023-5902

    Cross-Site Request Forgery (CSRF) in pkp/pkp-lib

    Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

    pkp pkp/pkp-lib
  • Medium 5.4
    CVE-2023-5892

    Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

    Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

    pkp pkp/pkp-lib
  • Medium 4.6
    CVE-2023-5890

    Cross-site Scripting (XSS) - Stored in pkp/pkp-lib

    Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

    pkp pkp/pkp-lib
  • Medium 4.3
    CVE-2023-5889

    Insufficient Session Expiration in pkp/pkp-lib

    Insufficient Session Expiration in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

    pkp pkp/pkp-lib
  • Medium 5.4
    CVE-2023-5891

    Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib

    Cross-site Scripting (XSS) - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

    pkp pkp/pkp-lib