Advisories · Technology

pkp/pkp-lib.

Every CVE that names pkp/pkp-lib among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-5904 CVE record

CVSS 2.7 Low

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
- pkp/pkp-lib
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2023
CVE-2023-5903 CVE record

CVSS 2.7 Low

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
- pkp/pkp-lib
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2023
CVE-2023-5900 CVE record

CVSS 3.5 Low

Cross-Site Request Forgery in pkp/pkp-lib
- pkp/pkp-lib
- Cross-site request forgery (CSRF)
Not analysed yet 1 Nov 2023
CVE-2023-5901 CVE record

CVSS 3.5 Low

Cross-site Scripting in pkp/pkp-lib
- pkp/pkp-lib
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2023
CVE-2023-5898 CVE record

CVSS 3.5 Low

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
- pkp/pkp-lib
- Cross-site request forgery (CSRF)
Not analysed yet 1 Nov 2023
CVE-2023-5902 CVE record

CVSS 4.3 Medium

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
- pkp/pkp-lib
- Cross-site request forgery (CSRF)
Not analysed yet 1 Nov 2023
CVE-2023-5896 CVE record

CVSS 2.7 Low

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
- pkp/pkp-lib
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2023
CVE-2023-5899 CVE record

CVSS 3.5 Low

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
- pkp/pkp-lib
- Cross-site request forgery (CSRF)
Not analysed yet 1 Nov 2023
CVE-2023-5895 CVE record

CVSS 3.5 Low

Cross-site Scripting (XSS) - DOM in pkp/pkp-lib
- pkp/pkp-lib
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2023
CVE-2023-5889 CVE record

CVSS 4.3 Medium

Insufficient Session Expiration in pkp/pkp-lib
- pkp/pkp-lib
- Authentication bypass
Not analysed yet 1 Nov 2023
CVE-2023-5891 CVE record

CVSS 5.4 Medium

Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib
- pkp/pkp-lib
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2023
CVE-2023-5892 CVE record

CVSS 5.4 Medium

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
- pkp/pkp-lib
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2023
CVE-2023-5893 CVE record

CVSS 3.5 Low

Cross-Site Request Forgery (CSRF) in pkp/pkp-lib
- pkp/pkp-lib
- Cross-site request forgery (CSRF)
Not analysed yet 1 Nov 2023
CVE-2023-5890 CVE record

CVSS 4.6 Medium

Cross-site Scripting (XSS) - Stored in pkp/pkp-lib
- pkp/pkp-lib
- Cross-site scripting (XSS)
Not analysed yet 1 Nov 2023
CVE-2023-4695 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib
- pkp/pkp-lib
- CWE-1241
Not analysed yet 1 Sept 2023