Gửi #695020: Public Knowledge Project Open Journal System 3.5.0-1 Cross Site Scriptingthông tin

tiêu đềPublic Knowledge Project Open Journal System 3.5.0-1 Cross Site Scripting
Mô tảThe OJS Manual Payment Plugin allows for text to be inserted and rendered unescaped on a public facing page. Scripts injected into this page by a Journal Manager or Administrator would run in the context of the current signed-in user that would visit the public facing page.
Nguồn⚠️ https://github.com/pkp/pkp-lib/issues/12022
Người dùng
 Anonymous User
Đệ trình13/11/2025 17:55 (cách đây 7 các tháng)
Kiểm duyệt20/11/2025 08:04 (7 days later)
Trạng tháiđược chấp nhận
Mục VulDB333042 [Public Knowledge Project omp/ojs 3.3.0/3.4.0/3.5.0 Payment Instructions Setting paymentForm.tpl manualInstructions Tập lệnh chéo trang]
điểm17

Interested in the pricing of exploits?

See the underground prices here!