Threats tagged 'ghsa-46mw-68fv-3w8x'

A cross-site scripting (XSS) vulnerability exists in Public Knowledge Project's Open Monograph Press (OMP) and Open Journal Systems (OJS) versions 3.3.0, 3.4.0, and 3.5.0. The issue is related to the manualInstructions argument in the paymentForm.tpl template of the Payment Instructions Setting Handler component. This vulnerability can be exploited remotely but requires high privileges and user interaction. The impact is limited to low severity with no confidentiality or availability impact reported.