Skip to content
OpenAdvisories

Product · pkp

Open Journal Systems

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.8
    CVE-2026-111609

    PKP Open Journal Systems through 3.5.0-5 Cross-Journal Subscription IDOR via updateSubscription

    PKP Open Journal Systems through 3.5.0-5 contains an insecure direct object reference vulnerability that allows journal or subscription managers to access other journals' subscriptions by supplying arbitrary subscription ids. Attackers can enumerate sequentia…

    pkp Open Journal Systems