Skip to content
OpenAdvisories

Product · pkp

pkp-lib

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2026-76572

    pkp pkp-lib XSLTransformer.php _transformPHP xml external entity reference

    A vulnerability was detected in pkp pkp-lib up to 3.3.0-22/3.4.0-10/3.5.0-4. The affected element is the function _transformPHP of the file classes/xslt/XSLTransformer.php. The manipulation results in xml external entity reference. The attack can be executed …

    pkp pkp-lib