Sfu Pkp Web Application Library — known CVE vulnerabilities

Every CVE whose affected-product data names Sfu Pkp Web Application Library, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (12)

• CVE-2023-5893 — CVSS 8.8 (high): Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5890 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5891 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Reflected in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5892 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5895 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5896 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4.
• CVE-2023-5904 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5903 — CVSS 5.4 (medium): Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-47271 — CVSS 5.3 (medium): PKP-WAL (aka PKP Web Application Library or pkp-lib) before 3.3.0-16, as used in Open Journal Systems (OJS) and other products, does not…
• CVE-2023-5902 — CVSS 4.3 (medium): Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5901 — CVSS 3.5 (low): Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
• CVE-2023-5900 — CVSS 3.5 (low): Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16.