2024-03-02 00:55:28 +00:00
{
"id" : "CVE-2024-25434" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2024-03-01T23:15:08.360" ,
2024-03-04 17:01:12 +00:00
"lastModified" : "2024-03-04T13:58:23.447" ,
"vulnStatus" : "Awaiting Analysis" ,
2024-03-02 00:55:28 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "A cross-site scripting (XSS) vulnerability in Pkp Ojs v3.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Publicname parameter."
}
] ,
"metrics" : { } ,
"references" : [
{
"url" : "https://drive.google.com/file/d/1MFuAyZukdJeA7HKz8o8pOKLJMjURTZCt/view?usp=sharing" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://github.com/machisri/CVEs-and-Vulnerabilities/blob/main/CVE-2024-25434%20-%3E%20Stored%20XSS%20in%20input%20public%20name%20of%20the%20Component" ,
"source" : "cve@mitre.org"
}
]
}
