← All advisories

Medium severity5.4NVD Advisory· Published Nov 1, 2023· Updated Jun 17, 2026

CVE-2023-5896

CVE-2023-5896

Description

Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Sfu/Pkp Web Application Library
cpe:2.3:a:sfu:pkp_web_application_library:*:*:*:*:*:*:*:*
Range: <3.4.0-4
GitHub/pkp-libllm-fuzzy
Range: <3.4.0-4
Pkp/Pkp Libllm-fuzzy2 versions
<3.4.0-4+ 1 more
- (no CPE)range: <3.4.0-4
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

2

github.com/pkp/pkp-lib/commit/18b318f83105ffa7fa214179f8e20507b0754236nvdPatch
huntr.com/bounties/a1f05be5-24ed-4ec5-9858-fce4233f7bb1nvdExploitIssue TrackingPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.