Description
PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting (XSS) attacks via crafted HTTP headers.
Unscored
CVE-2022-26616
EUVD-2022-31170GHSA-4mr3-vcgr-j557
PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting (XSS) attacks via crafted HTTP h…
Published Apr 4, 2022 · Updated Aug 3, 2024 · Assigned by mitre