medium6.1
CVE-2022-26616
PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting (XSS) attacks via crafted HTTP headers.
Impact
PKP Vendor Open Journal System v2.4.8 to v3.3.8 allows attackers to perform reflected cross-site scripting (XSS) attacks via crafted HTTP headers.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Public Knowledge Project | Open Journal Systems | from 2.4.8 before 3.3.0-9 |