Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.4%	CVE-2024-25438ojs · n/a Medium6.1EPSS 0.4%2024-03-01CVE Database V5CVE-2024-25438 A cross-site scripting (XSS) vulnerability in the Submission module of Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Input subject field under the Add Discussion function. EPSS 0.4%Vulnerability	CVE Database V5	2024-03-01
Medium	6.1	EPSS 0.5%	CVE-2024-24512ojs · n/a Medium6.1EPSS 0.5%2024-03-01CVE Database V5CVE-2024-24512 Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the input subtitle component. EPSS 0.5%Vulnerability	CVE Database V5	2024-03-01

Page 1 of 1