Cross Site Scripting Vulnerability in Pkp OJS Affects User Inputs
CVE-2024-24512

6.1MEDIUM

Key Information:

Vendor

PKP

Status
Open Journal Systems (OJS)
Vendor
CVE Published:
1 March 2024

What is CVE-2024-24512?

A Cross Site Scripting (XSS) vulnerability has been identified in the Pkp Open Journal Systems (OJS) version 3.4, where attackers can exploit the input subtitle component. This can lead to the execution of arbitrary code within the application. Proper input validation measures are essential to mitigate this risk and protect users from potential exploits.

References

https://drive.google.com/file/d/1jRsltje5PRkgigcY5qLWB3Gh...
https://github.com/machisri/CVEs-and-Vulnerabilities/blob...

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.