← All advisories

Medium severity5.4NVD Advisory· Published Nov 1, 2023· Updated Jun 17, 2026

CVE-2023-5894

CVE-2023-5894

Description

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/ojs prior to 3.3.0-16.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Sfu/Open Journal Systems
cpe:2.3:a:sfu:open_journal_systems:*:*:*:*:*:*:*:*
Range: <3.3.0-16
Pkp/Ojsllm-fuzzy
Range: <3.3.0-16
pkp/pkp/ojsv5
Range: unspecified

Patches

Vulnerability mechanics

References

2

github.com/pkp/ojs/commit/66927de1a82e3a3004db9741d1505ddac0980e63nvdPatch
huntr.com/bounties/aba3ba5b-aa6b-4076-b663-4237b4a0761dnvdExploitPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.