2024-03-02 00:55:28 +00:00
{
"id" : "CVE-2024-24511" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2024-03-01T23:15:08.260" ,
2024-03-04 17:01:12 +00:00
"lastModified" : "2024-03-04T13:58:23.447" ,
"vulnStatus" : "Awaiting Analysis" ,
2024-03-02 00:55:28 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "Cross Site Scripting vulnerability in Pkp OJS v.3.4 allows an attacker to execute arbitrary code via the Input Title component."
2024-04-04 08:46:00 +00:00
} ,
{
"lang" : "es" ,
"value" : "Una vulnerabilidad de Cross-Site Scripting en Pkp OJS v.3.4 permite a un atacante ejecutar c\u00f3digo arbitrario a trav\u00e9s del componente T\u00edtulo de entrada."
2024-03-02 00:55:28 +00:00
}
] ,
"metrics" : { } ,
"references" : [
{
"url" : "https://drive.google.com/file/d/1IhU9tNhc6enKL1Dgq9--R05biJBjodKv/view?usp=sharing" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://github.com/machisri/CVEs-and-Vulnerabilities/blob/main/CVE-2024-24511%20-%3E%20Stored%20XSS%20in%20input%20Title%20of%20the%20Component" ,
"source" : "cve@mitre.org"
}
]
}