PatchTheCVEpkp.sfu vulnerabilities
Recent CVEs affecting pkp.sfu products. 3 tracked.
pkp.sfu has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-03-01. Highest priority: CVE-2024-24512 (score 38/100).
- CVE-2024-25434 MEDIUM 5.4 DOWNGRADE A cross-site scripting (XSS) vulnerability in Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts o
- CVE-2024-24512 MEDIUM 6.1 DOWNGRADE Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input
- CVE-2024-24511 MEDIUM 6.1 DOWNGRADE Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input
FAQ
How do I fix pkp.sfu vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pkp.sfu being exploited right now?
None of the tracked pkp.sfu CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pkp.sfu CVE should I patch first?
CVE-2024-24512 currently ranks highest (38/100): Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input.