https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-25434.htmlhttps://patchthecve.com/cve/CVE-2024-25434.htmlWed, 17 Jun 2026 07:16:01 +0000MEDIUM 5.4: A cross-site scripting (XSS) vulnerability in Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Publicname parameter.https://patchthecve.com/cve/CVE-2024-24512.htmlhttps://patchthecve.com/cve/CVE-2024-24512.htmlWed, 17 Jun 2026 07:14:33 +0000MEDIUM 6.1: Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle component.https://patchthecve.com/cve/CVE-2024-24511.htmlhttps://patchthecve.com/cve/CVE-2024-24511.htmlWed, 17 Jun 2026 07:14:33 +0000MEDIUM 6.1: Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component.