PPKP

Products

Exploited and recent CVEs

• CVE-2026-111609 Low 3.8 PKP Open Journal Systems through 3.5.0-5 Cross-Journal Subscription IDOR via updateSubscription 0.3%
• CVE-2026-76572 Medium 4.7 pkp pkp-lib XSLTransformer.php _transformPHP xml external entity reference 0.5%
• CVE-2026-19906 Low 3.7 pkp pkp-lib API Key Generation APIProfileForm.php setData entropy 0.5%
• CVE-2024-7902 Medium 4.3 pkp ojs signOut redirect 0.4%
• CVE-2023-5904 Low 2.7 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib 0.5%
• CVE-2023-5903 Low 2.7 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib 0.5%
• CVE-2023-5900 Low 3.5 Cross-Site Request Forgery in pkp/pkp-lib 0.3%
• CVE-2023-5901 Low 3.5 Cross-site Scripting in pkp/pkp-lib 0.5%
• CVE-2023-5897 Medium 6.3 Cross-Site Request Forgery (CSRF) in pkp/customLocale 0.2%
• CVE-2023-5898 Low 3.5 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib 0.3%
• CVE-2023-5902 Medium 4.3 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib 0.3%
• CVE-2023-5896 Low 2.7 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib 0.4%
• CVE-2023-5899 Low 3.5 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib 0.3%
• CVE-2023-5895 Low 3.5 Cross-site Scripting (XSS) - DOM in pkp/pkp-lib 0.5%
• CVE-2023-5894 Low 3.5 Cross-site Scripting (XSS) - Stored in pkp/ojs 0.5%
• CVE-2023-5889 Medium 4.3 Insufficient Session Expiration in pkp/pkp-lib 0.5%
• CVE-2023-5891 Medium 5.4 Cross-site Scripting (XSS) - Reflected in pkp/pkp-lib 0.5%
• CVE-2023-5892 Medium 5.4 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib 0.5%
• CVE-2023-5893 Low 3.5 Cross-Site Request Forgery (CSRF) in pkp/pkp-lib 0.3%
• CVE-2023-5890 Medium 4.6 Cross-site Scripting (XSS) - Stored in pkp/pkp-lib 0.5%
• CVE-2023-5626 Low 3.5 Cross-Site Request Forgery (CSRF) in pkp/ojs 0.3%
• CVE-2023-4695 Critical 9.6 Use of Predictable Algorithm in Random Number Generator in pkp/pkp-lib 0.7%