Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-111609

PKP Open Journal Systems through 3.5.0-5 Cross-Journal Subscription IDOR via updateSubscription

PKP Open Journal Systems through 3.5.0-5 contains an insecure direct object reference vulnerability that allows journal or subscription managers to access other journals' subscriptions by supplying arbitrary subscription ids. Attackers can enumerate sequential ids through editSubscription to view subscriber details and use updateSubscription to reassign subscriptions to their own journal, revoking victims' access.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Openjournalsystems
Products
Open Journal Systems
CVE-2023-6671

Cross-Site Request Forgery on OPEN JOURNAL SYSTEMS

A vulnerability has been discovered on OJS, that consists in a CSRF (Cross-Site Request Forgery) attack that forces an end user to execute unwanted actions on a web application in which they're currently authenticated.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Openjournalsystems
Products
Open Journal Systems